Login Request a demo
TO
Product
Tomee
by Apache · last CVE Sep 19, 2021
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 4High 3Medium 3Low 0
Severity
All severities10Critical4High3Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tomee to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-13931
9.8
4%
Dec 18
If Apache TomEE 8.0.0-M1 - 8.0.3, 7.1.0 - 7.1.3, 7.0.0-M1 - 7.0.8, 1.0.0 - 1.7.5 is configured to use the embedded ActiveMQ broker, and the broker config is misconfigured, a JMX…
Affected: 1.0.0 through 1.7.5; 7.0.0 through 7.0.8; 7.1.0 through 7.1.3; 8.0.0 through 8.0.3; 7.0.0; 7.0.0; +2 more
CVE-2020-11969
9.8
4%
Jun 15
If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not…
Affected: 1.0.0 through 1.7.5; 7.0.0 through 7.0.7; 7.1.0 through 7.1.2; 8.0.0 through 8.0.1; 7.0.0; 7.0.0; +2 more
CVE-2019-13990
9.8
17%
Jul 26
initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description
Affected: 7.1.3
CVE-2016-0779
9.8
10%
Apr 11
The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized object
Affected: through 1.7.3; 7.0.0
Showing 4