Lucene search

K

Intellij Idea Security Vulnerabilities - CVSS Score 5 - 6

cve
cve

CVE-2019-14954

JetBrains IntelliJ IDEA before 2019.2 was resolving the markdown plantuml artifact download link via a cleartext http connection.

5.9CVSS

5.7AI Score

0.002EPSS

2019-10-01 02:15 PM
32
cve
cve

CVE-2019-18361

JetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution.

5.3CVSS

5.8AI Score

0.0004EPSS

2019-10-31 03:15 PM
36
cve
cve

CVE-2020-27622

In JetBrains IntelliJ IDEA before 2020.2, the built-in web server could expose information about the IDE version.

5.3CVSS

5.2AI Score

0.001EPSS

2020-11-16 04:15 PM
73
cve
cve

CVE-2021-25756

In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS.

5.3CVSS

5.4AI Score

0.001EPSS

2021-02-03 04:15 PM
33
4
cve
cve

CVE-2022-46827

In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible.

5.5CVSS

5.5AI Score

0.0004EPSS

2022-12-08 06:15 PM
36