Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2018-1000012Highorg.jvnet.hudson.plugins:warnings: XXE vulnerability Jenkins Warnings PluginCVE-2017-1000397Mediumorg.jenkins-ci.main:maven-plugin: MitM on Jenkins Maven PluginCVE-2017-1000402Mediumorg.jenkins-ci.plugins:swarm-client: Jenkins Swarm Plugin Client vulnerable to man-in-the-middle attacksCVE-2017-1000404Mediumse.diabol.jenkins.pipeline:delivery-pipeline-plugin: Jenkins Delivery Pipeline Plugin Cross-site Scripting vulnerabilityCVE-2017-1000505Mediumorg.jenkins-ci.plugins:script-security: Exposure of Sensitive Information to an Unauthorized Actor Jenkins Script Security PluginCVE-2017-1000389Mediumorg.jenkins-ci.plugins:global-build-stats: Cross-Site Request Forgery (CSRF) vulnerability in Jenkins global-build-stats pluginCVE-2017-15697Criticalorg.apache.nifi:nifi: Apache NiFi XSS issue in context path handlingCVE-2017-1000503Highorg.jenkins-ci.main:jenkins-core: Race Condition in JenkinsCVE-2017-1000502Highorg.jenkins-ci.plugins:ec2: Arbitrary shell command execution in Jenkins EC2 PluginCVE-2017-12632Highorg.apache.nifi:nifi: Apache NiFi host header poisoning issueCVE-2014-9970Highorg.jasypt:jasypt: Exposure of Sensitive Information to an Unauthorized Actor in Apache JasyptCVE-2017-1000355Mediumorg.jenkins-ci.main:jenkins-core: Deserialization of Untrusted Data in JenkinsCVE-2017-1000356Highorg.jenkins-ci.main:jenkins-core: Cross-Site Request Forgery in JenkinsCVE-2017-1000354Highorg.jenkins-ci.main:jenkins-core: Improper Authentication in JenkinsCVE-2018-1192Highorg.cloudfoundry.identity:cloudfoundry-identity-server: Cloud Foundry UAA SessionID present in Audit Event LogsCVE-2018-1000056Highorg.jenkins-ci.plugins:junit: Improper Restriction of XML External Entity Reference in Jenkins JUnit PluginCVE-2018-1000055Highorg.jvnet.hudson.plugins:android-lint: XXE vulnerability in Jenkins Android Lint PluginCVE-2018-1000058Highorg.jenkins-ci.plugins.workflow:workflow-support: Arbitrary code execution due to incomplete sandbox protection in Pipeline: Supporting APIs PluginCVE-2018-1000054Highorg.jvnet.hudson.plugins:ccm: Jenkins CCM Plugin vulnerable to Improper Restriction of XML External Entity ReferenceCVE-2017-15712Mediumorg.apache.oozie:oozie-core: Path Traversal in Apache OozieCVE-2012-3536Mediumorg.apache.james.hupa:hupa-parent: Apache James Hupa Webmail application Cross-site Scripting VulnerabilitiesCVE-2017-15696Highorg.apache.geode:geode-core: Apache Geode configuration request authorization vulnerabilityCVE-2017-15692Criticalorg.apache.geode:geode-core: Apache Geode unsafe deserialization in TcpServerCVE-2017-15693Highorg.apache.geode:geode-core: Apache Geode unsafe deserialization of application objectsCVE-2018-1316Highorg.apache.ode:ode: Apache ODE Path Traversal vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo