AU
Product
Aurora
On CISA KEVExploited in the wild
2
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 0Low 0
Watch
Add Aurora to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-4437 In wildKEV | 9.8 | Jun 7 | Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access… Affected: 0.10.0 before 0.18.1 |
| CVE-2024-27905 | 9.1 | Feb 27 | ** UNSUPPORTED WHEN ASSIGNED ** Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora Affected: 0.5.0 and later |
Showing 2