Login Request a demo
PI
Product
Pippo
by Pippo · last CVE Jun 12, 2019
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 4High 1Medium 0Low 0
Severity
All severities5Critical4High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Pippo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-20059
9.8
2%
Dec 11
jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE
Affected: 1.11.0
CVE-2018-18628
9.8
5%
Oct 23
An issue was discovered in Pippo 1.11.0
Affected: 1.11.0
CVE-2017-18349
9.8
39%
Oct 23
parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request,…
Affected: 1.11.0
CVE-2018-18240
9.8
4%
Oct 11
Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream's available protection…
Affected: through 1.11.0
CVE-2019-5442
7.5
1%
Jun 12
XML Entity Expansion (Billion Laughs Attack) on Pippo 1.12.0 results in Denial of Service.Entities are created recursively and large amounts of heap memory is taken
Affected: 1.12.0
Showing 5