Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2012-6612Highorg.apache.solr:solr-core: Improper Restriction of XML External Entity Reference in Apache Solr CVE-2013-1777Highorg.apache.geronimo.framework:geronimo-jmx-remoting: Apache Geronimo JMX Remoting functionality allows remote code execution in 3.x before v3.0.1 CVE-2014-1216Highorg.fitnesse:fitnesse: Improper Neutralization of Special Elements used in a Command in FitNesse Wiki CVE-2013-4310Mediumorg.apache.struts:struts2-core: Apache Struts2 Broken Access Control Vulnerability CVE-2014-2741Highorg.igniterealtime.openfire:parent: Ignite Realtime Openfire vulnerable to XMPPbomb attack CVE-2013-6372Mediumorg.jenkins-ci.plugins:subversion: Jenkins Subversion Plugin Stores Credentials with Base64 Encoding CVE-2013-6408Mediumorg.apache.solr:solr-core: XML Injection in Apache Solr CVE-2013-6407Mediumorg.apache.solr:solr-core: Apache Solr UpdateRequestHandler for XML resolves XML External Entities CVE-2013-7259Highorg.neo4j:neo4j: Neo4J vulnerable to Cross-Site Request Forgery CVE-2014-0168Mediumorg.jolokia:jolokia-core: Cross-Site Request Forgery in Jolokia CVE-2014-5326Mediumorg.directwebremoting:dwr: Improper Neutralization of Input During Web Page Generation in Direct Web Remoting CVE-2014-3627Mediumorg.apache.hadoop:hadoop-client: Improper Link Resolution Before File Access in Apache Hadoop CVE-2014-3628Mediumorg.apache.solr:solr: Improper Neutralization of Input During Web Page Generation in Apache Solr CVE-2013-2035Mediumorg.fusesource.hawtjni:hawtjni-runtime: Improper Control of Generation of Code in HawtJNI CVE-2012-5370Mediumorg.jruby:jruby-parent: JRuby denial of service via Hash Collision CVE-2014-7816Mediumio.undertow:undertow-core: Improper Limitation of a Pathname to a Restricted Directory in JBoss Undertow CVE-2014-7839Mediumorg.jboss.resteasy:resteasy-jaxrs: XML External Entity Reference in RESTEasy CVE-2014-8125Highorg.drools:drools-core: Improper Input Validation in Drools and jBPM CVE-2015-3337Mediumorg.elasticsearch:elasticsearch: Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch CVE-2015-3158Mediumorg.picketlink:picketlink-tomcat-common: PicketLink does not properly check role based authorization CVE-2013-6397Mediumorg.apache.solr:solr-core: Improper Limitation of a Pathname to a Restricted Directory in Apache Solr CVE-2015-5210Mediumorg.apache.ambari:ambari: Apache Ambari Open Redirect CVE-2015-1775Mediumorg.apache.ambari:ambari: Apache Ambari SSRF Vulnerability CVE-2015-8795Mediumorg.apache.solr:solr-core: Improper Neutralization of Input During Web Page Generation in Apache Solr CVE-2015-8797Mediumorg.apache.solr:solr-core: Improper Neutralization of Input During Web Page Generation in Apache Solr

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Browse by ecosystem

Stop the waste.Protect your environment with Kodem.

Stop the waste.
Protect your environment with Kodem.