Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2020-2239Loworg.jenkins-ci.plugins:Parameterized-Remote-Trigger: Secret stored in plain text by Jenkins Parameterized Remote Trigger PluginCVE-2020-2238Highorg.jenkins-ci.tools:git-parameter: Stored XSS vulnerability in Jenkins Git Parameter PluginCVE-2020-15777Highcom.gradle:gradle-enterprise-maven-extension: Maven Extension plugin for Gradle Enterprise vulnerable to Deserialization of Untrusted DataCVE-2020-7019Mediumorg.elasticsearch:elasticsearch: Improper privilege management in elasticsearchCVE-2020-2235Highorg.jenkins-ci.plugins:pipeline-maven: CSRF vulnerability in Jenkins Pipeline Maven Integration Plugin allow capturing credentialsCVE-2020-2237Mediumorg.jenkins-ci.plugins:flaky-test-handler: CSRF vulnerability in Jenkins Flaky Test Handler PluginCVE-2020-2234Highorg.jenkins-ci.plugins:pipeline-maven: Missing permission check in Jenkins Pipeline Maven Integration Plugin allow capturing credentialsCVE-2020-2230Highorg.jenkins-ci.main:jenkins-core: Jenkins Cross-site Scripting vulnerability in project naming strategyCVE-2020-2232Loworg.jenkins-ci.plugins:email-ext: Jenkins Email Extension Plugin SMTP password transmitted and displayed in plain textCVE-2020-2229Highorg.jenkins-ci.main:jenkins-core: Jenkins Cross-Site Scripting vulnerability in help iconsCVE-2020-2236Highcom.axis.system.jenkins.plugins.downstream:yet-another-build-visualizer: Stored XSS vulnerability in Jenkins Yet Another Build Visualizer PluginCVE-2020-2233Mediumorg.jenkins-ci.plugins:pipeline-maven: Missing permission check in Jenkins Pipeline Maven Integration Plugin allows enumerating credentials IDsCVE-2020-2231Mediumorg.jenkins-ci.main:jenkins-core: Improper Neutralization of Input During Web Page Generation in JenkinsCVE-2020-14297Mediumorg.jboss:jboss-ejb-client: Wildfly EJB Client causes DoSCVE-2020-15842Highcom.liferay.portal:release.portal.bom: Liferay Portal and Liferay DXP have Insecure Deserialization VulnerabilityCVE-2020-15841Highcom.liferay.portal:release.portal.bom: Liferay Portal and Liferay DXP Potentially Reveal LDAP Server Password via Unsafe ConnectionCVE-2020-2222Highorg.jenkins-ci.main:jenkins-core: Stored XSS vulnerability in Jenkins 'keep forever' badge iconCVE-2020-2225Highorg.jenkins-ci.plugins:matrix-project: Stored XSS vulnerability in multiple axis builds tooltips in Jenkins Matrix Project PluginCVE-2020-2226Highorg.jenkins-ci.plugins:matrix-auth: Stored XSS vulnerability in Jenkins Matrix Authorization Strategy PluginCVE-2020-2228Highorg.jenkins-ci.plugins:gitlab-oauth: Improper authorization of users and groups with the same base name in Jenkins GitLab Authentication PluginCVE-2020-2227Highorg.jenkins-ci.plugins:deployer-framework: Stored XSS vulnerability in Jenkins Deployer Framework PluginCVE-2020-2224Highorg.jenkins-ci.plugins:matrix-project: Stored XSS vulnerability in single axis builds tooltips in Jenkins Matrix Project PluginCVE-2020-2223Highorg.jenkins-ci.main:jenkins-core: Stored XSS vulnerability in Jenkins console linksCVE-2020-2220Highorg.jenkins-ci.main:jenkins-core: Stored XSS vulnerability in Jenkins job build time trendCVE-2020-2221Highorg.jenkins-ci.main:jenkins-core: Stored XSS vulnerability in Jenkins upstream cause

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo