Maven vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2015-5324Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows Unauthorized Viewing of Queue API InformationCVE-2015-5319Mediumorg.jenkins-ci.main:jenkins-core: Jenkins has XML External Entity (XXE) Vulnerability in Job Configuration via CLICVE-2015-5317Highorg.jenkins-ci.main:jenkins-core: Jenkins discloses project names via fingerprintsCVE-2015-5322Mediumorg.jenkins-ci.main:jenkins-core: Jenkins has Local File Inclusion VulnerabilityCVE-2015-5326Loworg.jenkins-ci.main:jenkins-core: Jenkins allows Cross-Site Scripting (XSS)CVE-2015-5325Mediumorg.jenkins-ci.main:jenkins-core: Jenkins allows Bypass of Access RestrictionsCVE-2015-5254Criticalorg.apache.activemq:activemq-client: Improper Input Validation in Apache ActiveMQCVE-2015-5321Mediumorg.jenkins-ci.main:jenkins-core: Jenkins has Information Disclosure via Sidepanel WidgetCVE-2015-6748Mediumorg.jsoup:jsoup: Improper Neutralization of Input During Web Page Generation in JsoupCVE-2017-3200Highorg.graniteds:granite-server-core: GraniteDS Insecure DeserializationCVE-2017-3199Highorg.graniteds:granite-core: GraniteDS Insecure DeserializationCVE-2013-2165Highorg.richfaces:richfaces: Remote code execution due to insecure deserializationCVE-2014-7808Highorg.apache.wicket:wicket-core: Apache Wicket insecure defaultsCVE-2018-3831Highorg.elasticsearch:elasticsearch: Exposure of Sensitive Information to an Unauthorized Actor in ElasticsearchCVE-2013-4330Mediumorg.apache.camel:camel-core: Improper Control of Generation of Code in Apache CamelCVE-2016-2173Criticalorg.springframework.amqp:spring-amqp: Improper Input Validation in Spring AMQPCVE-2017-9791Criticalorg.apache.struts:struts2-struts1-plugin: Code execution in Apache Struts 1 pluginCVE-2014-1972Highorg.apache.tapestry:tapestry-core: Apache Tapestry Unsafe Object StorageCVE-2019-1003042Mediumorg.6wind.jenkins:lockable-resources: Jenkins Lockable Resources Plugin XSS vulnerabilityCVE-2019-1003076Mediumorg.jenkins-ci.plugins:audit2db: CSRF vulnerability in Jenkins Audit to Database PluginCVE-2019-1003044Highorg.jenkins-ci.plugins:slack: Jenkins Slack Notification Plugin CSRF vulnerability and missing permission checksCVE-2019-1003080Mediumorg.jenkins-ci.plugins:openshift-deployer: CSRF vulnerability in Jenkins OpenShift Deployer PluginCVE-2019-1003078Mediumorg.jenkins-ci.plugins:labmanager: Jenkins VMware Lab Manager Slaves Plugin vulnerable CSRF vulnerabilityCVE-2019-1003058Mediumorg.jvnet.hudson.plugins:ftppublisher: CSRF vulnerability in Jenkins FTP publisher PluginCVE-2019-1003046Mediumorg.jenkins-ci.plugins:fortify-on-demand-uploader: Jenkins Fortify on Demand Uploader Plugin CSRF vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo