II
Product
IntelliJ IDEA
82
CVEs
0
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 11High 38Medium 23Low 10
Watch
Add IntelliJ IDEA to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-86505 | 3.3 | Sep 7 | In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace Affected: before 2026.2.2 |
| CVE-2026-86503 | 3.3 | Sep 7 | In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching Affected: before 2026.2.2 |
| CVE-2026-49383 | 3.3 | May 29 | In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible Affected: before 2026.1 |
| CVE-2025-32054 | 3.3 | Apr 3 | In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file Affected: 2024.2.4 before 2024.3.0 |
| CVE-2023-38069 | 3.3 | Jul 12 | In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases Affected: before 2023.1.4 |
| CVE-2022-46825 | 3.3 | Dec 8 | In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects Affected: before 2022.3 |
| CVE-2022-37010 | 3.3 | Jul 28 | In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was missed Affected: before 2022.2 |
| CVE-2022-29816 | 3.2 | Apr 28 | In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible Affected: before 2022.1 |
| CVE-2026-86501 | 2.8 | Sep 7 | In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log Affected: before 2026.2.2 |
| CVE-2022-29812 | 2.3 | Apr 28 | In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficient Affected: before 2022.1 |
Showing 10