JO
Product
Jolokia
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch
Add Jolokia to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-10899 | 8.8 | Aug 1 | A flaw was found in Jolokia versions from 1.2 to before 1.6.1 Affected: 1.2.0 before 1.6.1 |
| CVE-2018-1000129 | 6.1 | Mar 14 | An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser Affected: 1.3.7 |
| CVE-2014-0168 | – | Oct 6 | Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via… Affected: through 1.2.0; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +8 more |
Showing 3