Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2015-0265Mediumorg.apache.ranger:ranger: Apache Ranger Cross-site Scripting vulnerability CVE-2015-0266Highorg.apache.ranger:ranger: Apache Ranger allows users to bypass intended access restrictions via direct access to module URLs CVE-2015-5167Mediumorg.apache.ranger:ranger: Apache Ranger allows users to bypass intended access restrictions via the REST API CVE-2016-0735Highorg.apache.ranger:ranger: Apache Ranger Access Restriction Bypass CVE-2016-0710Highorg.apache.portals.jetspeed-2:jetspeed: Apache Jetspeed vulnerable to SQL Injection CVE-2016-0711Mediumorg.apache.portals.jetspeed-2:jetspeed-commons: Apache Jetspeed vulnerable to Cross-site Scripting CVE-2016-0709Highorg.apache.portals.jetspeed-2:jetspeed: Path Traversal in Apache Jetspeed CVE-2016-0712Mediumorg.apache.portals.jetspeed-2:jetspeed: Cross-site Scripting in Apache Jetspeed CVE-2013-5679Loworg.owasp.esapi:esapi: Missing Cryptographic Step in OWASP Enterprise Security API for Java CVE-2011-4344Loworg.jenkins-ci.main:jenkins-core: Jenkins allows Cross-Site Scripting (XSS)CVE-2014-2060Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows Remote Attackers to Hijack Sessions CVE-2013-7330Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows attackers to configure restricted projects CVE-2014-2058Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows attackers to execute arbitrary jobs CVE-2014-2061Mediumorg.jenkins-ci.main:jenkins-core: Jenkin allows attackers to obtain passwords by reading the HTML source code CVE-2014-2063Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Vulnerable to Clickjacking CVE-2014-2062Mediumorg.jenkins-ci.main:jenkins-core: Jenkins does not invalidate the API token when a user is deleted CVE-2014-2064Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows attackers to determine whether a user exists CVE-2014-2066Mediumorg.jenkins-ci.main:jenkins-core: Jenkins session fixation vulnerability CVE-2014-2065Mediumorg.jenkins-ci.main:jenkins-core: Jenkins cross-site scripting (XSS) vulnerability CVE-2014-3661Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Denial of Service vulnerability CVE-2014-2068Loworg.jenkins-ci.main:jenkins-core: Jenkins allows attackers to obtain sensitive information CVE-2015-7536Mediumorg.jenkins-ci.main:jenkins-core: Improper Neutralization of Input During Web Page Generation in Jenkins CVE-2014-3662Mediumorg.jenkins-ci.main:jenkins-core: Jenkins Exposure of Sensitive Information to an Unauthorized Actor vulnerability CVE-2014-3663Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows remote authenticated users to bypass intended restrictions and create or destroy arbitrary jobs CVE-2014-3665Mediumorg.jenkins-ci.main:jenkins-core: Jenkins improperly ensures trust separation

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo