Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2019-16538Highorg.jenkins-ci.plugins:script-security: Incorrect Authorization in Jenkins Script Security PluginCVE-2019-16539Mediumorg.jenkins-ci.plugins:support-core: Missing permission check in Jenkins Support Core PluginCVE-2019-7619Mediumorg.elasticsearch:elasticsearch: Exposure of Sensitive Information to an Unauthorized Actor in ElasticsearchCVE-2019-0205Highorg.apache.thrift:libthrift: Loop with Unreachable Exit Condition in Apache ThriftCVE-2019-18393Mediumorg.igniterealtime.openfire:parent: Ignite Realtime Openfire directory traversal vulnerabilityCVE-2019-18394Criticalorg.igniterealtime.openfire:parent: Ignite Realtime Openfire vulnerable to Server Side Request Forgery CVE-2019-12415Mediumorg.apache.poi:poi: Improper Restriction of XML External Entity Reference in Apache POI CVE-2019-10476Highorg.jenkins-ci.plugins:zulip: Jenkins Zulip Plugin vulnerable to Insufficiently Protected CredentialsCVE-2019-10472Mediumorg.jenkins-ci.plugins:libvirt-slave: Jenkins Libvirt Slaves Plugin vlnerable to Incorrect Default PermissionsCVE-2019-10475Mediumorg.jenkins-ci.plugins:build-metrics: Jenkins build-metrics Plugin reflected cross-site scripting vulnerabilityCVE-2019-10474Mediumorg.jenkins-ci.plugins:global-post-script: Jenkins Global Post Script Plugin missing permission checkCVE-2019-10461Highorg.jenkins-ci.plugins:dynatrace-dashboard: Jenkins Dynatrace Plugin vulnerable to Insufficiently Protected CredentialsCVE-2019-10462Highorg.jenkins-ci.plugins:dynatrace-dashboard: Jenkins Dynatrace Plugin vulnerable to Cross-Site Request ForgeryCVE-2019-10473Mediumorg.jenkins-ci.plugins:libvirt-slave: Jenkins Libvirt Slaves Plugin vlnerable to Credential EnumerationCVE-2019-10468Highcom.elasticbox.jenkins-ci.plugins:kubernetes-ci: Jenkins Kubernetes CI/CD Plugin vulnerable to Cross-Site Request ForgeryCVE-2019-10470Mediumcom.elasticbox.jenkins-ci.plugins:kubernetes-ci: Jenkins Kubernetes CI/CD Plugin vulnerable to Credential EnumerationCVE-2019-10471Highorg.jenkins-ci.plugins:libvirt-slave: Jenkins Libvirt Slaves Plugin vlnerable to Cross-Site Request ForgeryCVE-2019-10463Mediumorg.jenkins-ci.plugins:dynatrace-dashboard: Jenkins Dynatrace Plugin contains Incorrect Default PermissionsCVE-2019-10465Mediumorg.jenkins-ci.plugins:weblogic-deployer-plugin: Jenkins Deploy WebLogic Plugin missing permission checkCVE-2019-10467Mediumorg.jenkins-ci.plugins:sonar-gerrit: Jenkins Sonar Gerrit Plugin stores credentials unencryptedCVE-2019-10460Highorg.jenkins-ci.plugins:bitbucket-oauth: Jenkins Bitbucket OAuth Plugin contains Insufficiently Protected CredentialsCVE-2019-10464Highorg.jenkins-ci.plugins:weblogic-deployer-plugin: Jenkins Deploy WebLogic Plugin cross-site request forgery vulnerabilityCVE-2019-10459Mediumorg.jenkins-ci.plugins:mattermost: Jenkins Mattermost Notification Plugin contains unencrypted storage of secret tokenCVE-2019-10466Highorg.jenkins-ci.plugins.plugin:fireline: Jenkins 360 FireLine Plugin vulnerable to XML External Entity ReferenceCVE-2019-10469Mediumcom.elasticbox.jenkins-ci.plugins:kubernetes-ci: Jenkins Kubernetes CI/CD Plugin vulnerable to Improper Authorization

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo