DR
Product
Drools
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch
Add Drools to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-41411 | 9.8 | Jun 16 | drools <=7.59.x is affected by an XML External Entity (XXE) vulnerability in KieModuleMarshaller.java Affected: before 7.6.0 |
| CVE-2022-1415 | 8.8 | Sep 11 | A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data Affected: 7.69.0 |
| CVE-2014-8125 | – | Apr 21 | XML external entity (XXE) vulnerability in Drools and jBPM before 6.2.0 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a crafted… Affected: through 6.1.0 |
Showing 3