Severity Critical High Medium Low Informational Vulnerability Categories Broken Link Exploit Issue Tracking Mailing List Mitigation Not Applicable Patch Permissions Required Press Media Coverage Product Release Notes Technical Description Third Party Advisory Tool Signature URL Repurposed US Government Resource VDB Entry Vendor Advisory Vulnerability Name CVE CWE CWE Severity CVE-2006-1547 Vulnerability in maven package struts:struts High CVE-2007-5613 Vulnerability in maven package org.mortbay.jetty:jetty CWE-79 CWE-79 Critical CVE-2007-5614 Vulnerability in maven package org.mortbay.jetty:jetty Critical CVE-2009-0217 Vulnerability in maven package org.apache.santuario:xmlsec Critical CVE-2009-2625 Vulnerability in maven package xerces:xercesimpl Critical CVE-2011-1498 Vulnerability in maven package org.apache.httpcomponents:httpclient CWE-200 CWE-200 Critical CVE-2011-3389 Vulnerability in npm package faye CWE-326 CWE-326 Critical CVE-2011-4461 Vulnerability in maven package org.eclipse.jetty.aggregate:jetty-all CWE-310 CWE-310 Medium CVE-2011-4461 Vulnerability in maven package org.eclipse.jetty.aggregate:jetty-all-server CWE-310 CWE-310 Medium CVE-2011-4461 Vulnerability in maven package org.eclipse.jetty.aggregate:jetty-plus CWE-310 CWE-310 Medium CVE-2011-4461 Vulnerability in maven package org.eclipse.jetty.aggregate:jetty-servlet CWE-310 CWE-310 Medium CVE-2011-4461 Vulnerability in maven package org.eclipse.jetty.aggregate:jetty-webapp CWE-310 CWE-310 Medium CVE-2011-4461 Vulnerability in maven package org.eclipse.jetty:jetty-server CWE-310 CWE-310 Medium CVE-2011-4461 Vulnerability in maven package org.mortbay.jetty:jetty CWE-310 CWE-310 Medium CVE-2011-4838 Vulnerability in maven package com.sun.grizzly:jruby CWE-400 CWE-400 Critical CVE-2011-4838 Vulnerability in maven package jruby:jruby CWE-400 CWE-400 Critical CVE-2011-4838 Vulnerability in maven package org.jruby:jruby CWE-400 CWE-400 Critical CVE-2011-4838 Vulnerability in maven package org.jruby:jruby-core CWE-400 CWE-400 Critical CVE-2011-4838 Vulnerability in maven package org.jruby:jruby-stdlib CWE-400 CWE-400 Critical CVE-2011-4858 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core CWE-399 CWE-399 Critical CVE-2011-4858 Vulnerability in maven package org.apache.tomcat:catalina CWE-399 CWE-399 Critical CVE-2011-4858 Vulnerability in maven package org.apache.tomcat:tomcat-catalina CWE-399 CWE-399 Critical CVE-2011-4858 Vulnerability in maven package tomcat:catalina CWE-399 CWE-399 Critical CVE-2011-5034 Vulnerability in maven package geronimo:geronimo-tomcat CWE-20 CWE-20 Critical CVE-2011-5034 Vulnerability in maven package org.apache.geronimo.modules:geronimo-tomcat6 CWE-20 CWE-20 Critical CVE-2011-5034 Vulnerability in maven package org.apache.geronimo:geronimo-tomcat CWE-20 CWE-20 Critical CVE-2012-0391 Vulnerability in maven package com.opensymphony:xwork-core CWE-94 CWE-94 Critical CVE-2012-0391 Vulnerability in maven package org.apache.struts.xwork:xwork-core CWE-94 CWE-94 Critical CVE-2012-0391 Vulnerability in maven package org.apache.struts:struts2-core CWE-94 CWE-94 Critical CVE-2013-1571 Vulnerability in maven package org.apache.tomcat:catalina Critical CVE-2013-2251 Vulnerability in maven package org.apache.struts:struts2-core CWE-74 CWE-74 Critical CVE-2013-3827 Vulnerability in maven package com.sun.faces:jsf-impl Critical CVE-2014-0107 Vulnerability in maven package xalan:xalan CWE-264 CWE-264 Critical CVE-2014-0363 Vulnerability in maven package org.igniterealtime.smack:smack-core CWE-295 CWE-295 Critical CVE-2014-0364 Vulnerability in maven package org.igniterealtime.smack:smack CWE-345 CWE-345 Critical CVE-2014-3120 Vulnerability in maven package org.elasticsearch:elasticsearch CWE-284 CWE-284 Critical CVE-2015-1427 Vulnerability in maven package org.elasticsearch:elasticsearch Critical CVE-2015-2912 Vulnerability in maven package com.orientechnologies:orientdb-core CWE-352 CWE-352 Critical CVE-2015-2912 Vulnerability in maven package com.orientechnologies:orientdb-server CWE-352 CWE-352 Critical CVE-2015-2913 Vulnerability in maven package com.orientechnologies:orientdb-server CWE-200 CWE-200 Medium CVE-2015-2918 Vulnerability in maven package com.orientechnologies:orientdb-studio CWE-20 CWE-20 High CVE-2015-5317 Vulnerability in maven package org.jenkins-ci.main:jenkins-core CWE-200 CWE-200 High CVE-2016-3088 Vulnerability in maven package org.apache.activemq:activemq-fileserver CWE-434 CWE-434 Critical CVE-2016-3088 Vulnerability in maven package org.apache.activemq:apache-activemq CWE-434 CWE-434 Critical CVE-2016-4437 Vulnerability in maven package org.apache.shiro:shiro-core Critical CVE-2016-5388 Vulnerability in maven package org.apache.tomcat:tomcat CWE-284 CWE-284 Critical CVE-2016-5388 Vulnerability in maven package org.apache.tomcat:tomcat-catalina CWE-284 CWE-284 Critical CVE-2016-8735 Vulnerability in maven package org.apache.tomcat:tomcat-catalina-jmx-remote Critical CVE-2016-9487 Vulnerability in maven package org.idpf:epubcheck CWE-611 CWE-611 High CVE-2017-3199 Vulnerability in maven package org.graniteds:granite-generator CWE-502 CWE-502 Critical CVE-2017-3200 Vulnerability in maven package org.graniteds:granite-generator CWE-913 CWE-913 Critical CVE-2017-3202 Vulnerability in maven package com.exadel.flamingo.flex:amf-serializer CWE-913 CWE-913 Critical CVE-2017-3203 Vulnerability in maven package org.springframework.flex:spring-flex-core CWE-502 CWE-502 Critical CVE-2017-3208 Vulnerability in maven package com.exadel.flamingo.flex:amf-serializer CWE-611 CWE-611 Critical CVE-2017-5638 Vulnerability in maven package org.apache.struts:struts2-core CWE-755 CWE-755 Critical CVE-2017-5641 Vulnerability in maven package com.adobe.blazeds:flex-messaging-core CWE-502 CWE-502 Critical CVE-2017-5641 Vulnerability in maven package org.apache.flex.blazeds:blazeds CWE-502 CWE-502 Critical CVE-2017-5641 Vulnerability in maven package org.apache.flex.blazeds:flex-messaging-core CWE-502 CWE-502 Critical CVE-2017-9791 Vulnerability in maven package org.apache.struts:struts2-struts1-plugin CWE-20 CWE-20 Critical CVE-2017-9805 Vulnerability in maven package org.apache.struts:struts2-core CWE-502 CWE-502 Critical CVE-2017-11429 Vulnerability in npm package saml2-js CWE-287 CWE-287 Critical CVE-2017-12615 Vulnerability in maven package org.apache.tomcat:tomcat-catalina CWE-434 CWE-434 Critical CVE-2017-12617 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core CWE-434 CWE-434 Critical CVE-2017-12617 Vulnerability in maven package org.apache.tomcat:catalina CWE-434 CWE-434 Critical CVE-2017-12617 Vulnerability in maven package org.apache.tomcat:tomcat-catalina CWE-434 CWE-434 Critical CVE-2017-12617 Vulnerability in maven package org.apache.tomcat:tomcat-util CWE-434 CWE-434 Critical CVE-2017-13098 Vulnerability in maven package com.madgag.spongycastle:bctls-jdk15on CWE-203 CWE-203 Medium CVE-2017-13098 Vulnerability in maven package org.bouncycastle:bctls-jdk15on CWE-203 CWE-203 Medium CVE-2017-16197 Vulnerability in npm package qinserve CWE-22 CWE-22 High CVE-2017-1000353 Vulnerability in maven package org.jenkins-ci.main:jenkins-core CWE-502 CWE-502 Critical CVE-2017-1000486 Vulnerability in maven package org.primefaces:primefaces CWE-326 CWE-326 Critical CVE-2018-1273 Vulnerability in maven package org.springframework.data:spring-data-commons CWE-94 CWE-94 Critical CVE-2018-5382 Vulnerability in maven package org.bouncycastle:bcprov-jdk14 CWE-327 CWE-327 Medium CVE-2018-5382 Vulnerability in maven package org.bouncycastle:bcprov-jdk15 CWE-327 CWE-327 Medium CVE-2018-5382 Vulnerability in maven package org.bouncycastle:bcprov-jdk15on CWE-327 CWE-327 Medium CVE-2018-5382 Vulnerability in maven package org.bouncycastle:bcprov-jdk16 CWE-327 CWE-327 Medium CVE-2018-11307 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind CWE-502 CWE-502 Critical CVE-2018-11776 Vulnerability in maven package org.apache.struts:struts2-core Critical CVE-2018-1000861 Vulnerability in maven package org.jenkins-ci.main:jenkins-core CWE-502 CWE-502 Critical CVE-2019-0193 Vulnerability in maven package org.apache.solr:solr-core CWE-94 CWE-94 High CVE-2019-0193 Vulnerability in maven package org.apache.solr:solr-dataimporthandler CWE-94 CWE-94 High CVE-2019-5786 Vulnerability in maven package org.webjars.npm:electron CWE-416 CWE-416 High CVE-2019-5786 Vulnerability in maven package org.webjars.npm:puppeteer CWE-416 CWE-416 High CVE-2019-5786 Vulnerability in npm package electron CWE-416 CWE-416 High CVE-2019-5786 Vulnerability in npm package puppeteer CWE-416 CWE-416 High CVE-2019-9512 Vulnerability in maven package io.netty:netty-codec-http2 CWE-400 CWE-400 High CVE-2019-9514 Vulnerability in maven package io.netty:netty-codec-http2 CWE-400 CWE-400 High CVE-2019-9515 Vulnerability in maven package io.netty:netty-codec-http2 CWE-400 CWE-400 High CVE-2019-9518 Vulnerability in maven package io.netty:netty-codec-http2 CWE-400 CWE-400 High CVE-2019-10758 Vulnerability in npm package mongo-express Critical CVE-2019-17558 Vulnerability in maven package org.apache.solr:solr-velocity CWE-74 CWE-74 High CVE-2019-1003029 Vulnerability in maven package org.jenkins-ci.plugins:script-security Critical CVE-2019-1003030 Vulnerability in maven package org.jenkins-ci.plugins.workflow:workflow-cps Critical CVE-2020-1938 Vulnerability in maven package org.apache.tomcat:coyote Critical CVE-2020-1938 Vulnerability in maven package org.apache.tomcat:tomcat-coyote Critical CVE-2020-1938 Vulnerability in maven package org.apache.tomcat:tomcat-util Critical CVE-2020-1956 Vulnerability in maven package org.apache.kylin:kylin-core-common CWE-78 CWE-78 Critical CVE-2020-5410 Vulnerability in maven package org.springframework.cloud:spring-cloud-config-server CWE-23 CWE-23 High CVE-2020-7961 Vulnerability in maven package com.liferay.portal:com.liferay.portal.impl CWE-502 CWE-502 Critical CVE-2020-7961 Vulnerability in maven package com.liferay.portal:portal-impl CWE-502 CWE-502 Critical CVE-2020-10199 Vulnerability in maven package org.sonatype.nexus:nexus-extdirect CWE-917 CWE-917 Critical CVE-2020-11023 Vulnerability in maven package org.fujion.webjars:jquery CWE-79 CWE-79 High CVE-2020-11023 Vulnerability in maven package org.webjars.bower:jquery CWE-79 CWE-79 High CVE-2020-11023 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery CWE-79 CWE-79 High CVE-2020-11023 Vulnerability in maven package org.webjars.npm:jquery CWE-79 CWE-79 High CVE-2020-11023 Vulnerability in maven package org.webjars:jquery CWE-79 CWE-79 High CVE-2020-11023 Vulnerability in npm package jquery CWE-79 CWE-79 High CVE-2020-15999 Vulnerability in maven package org.webjars.npm:electron CWE-787 CWE-787 Critical CVE-2020-15999 Vulnerability in npm package electron CWE-787 CWE-787 Critical CVE-2020-16013 Vulnerability in maven package org.webjars.npm:electron CWE-787 CWE-787 Critical CVE-2020-16013 Vulnerability in npm package electron CWE-787 CWE-787 Critical CVE-2020-16017 Vulnerability in maven package org.webjars.npm:electron CWE-416 CWE-416 Critical CVE-2020-16017 Vulnerability in npm package electron CWE-416 CWE-416 Critical CVE-2020-17519 Vulnerability in maven package org.apache.flink:flink-runtime_2.11 CWE-552 CWE-552 High CVE-2020-17519 Vulnerability in maven package org.apache.flink:flink-runtime_2.12 CWE-552 CWE-552 High CVE-2020-17530 Vulnerability in maven package org.apache.struts:struts2-core CWE-917 CWE-917 Critical CVE-2021-21166 Vulnerability in maven package org.webjars.npm:electron CWE-362 CWE-362 Critical CVE-2021-21166 Vulnerability in npm package electron CWE-362 CWE-362 Critical CVE-2021-21193 Vulnerability in maven package org.webjars.npm:electron CWE-416 CWE-416 Critical CVE-2021-21193 Vulnerability in npm package electron CWE-416 CWE-416 Critical CVE-2021-21315 Vulnerability in npm package systeminformation CWE-78 CWE-78 High CVE-2021-22204 Vulnerability in npm package exiftool-vendored CWE-94 CWE-94 High CVE-2021-44228 Vulnerability in maven package org.apache.logging.log4j:log4j-core CWE-20 CWE-20 Critical CVE-2021-45046 Vulnerability in maven package org.apache.logging.log4j:log4j-core CWE-917 CWE-917 Critical CVE-2021-45105 Vulnerability in maven package org.apache.logging.log4j:log4j-core CWE-20 CWE-20 Medium CVE-2022-4135 Vulnerability in npm package electron CWE-787 CWE-787 Critical CVE-2022-22947 Vulnerability in maven package org.springframework.cloud:spring-cloud-gateway CWE-94 CWE-94 Critical CVE-2022-22963 Vulnerability in maven package org.springframework.cloud:spring-cloud-function-core CWE-94 CWE-94 Critical CVE-2022-22965 Vulnerability in maven package org.springframework.boot:spring-boot-starter-web CWE-94 CWE-94 Critical CVE-2022-22965 Vulnerability in maven package org.springframework.boot:spring-boot-starter-webflux CWE-94 CWE-94 Critical CVE-2022-22965 Vulnerability in maven package org.springframework:spring-beans CWE-94 CWE-94 Critical CVE-2022-22965 Vulnerability in maven package org.springframework:spring-webflux CWE-94 CWE-94 Critical CVE-2022-22965 Vulnerability in maven package org.springframework:spring-webmvc CWE-94 CWE-94 Critical CVE-2022-24816 Vulnerability in maven package it.geosolutions.jaiext.jiffle:jt-jiffle-language CWE-94 CWE-94 Critical CVE-2022-33891 Vulnerability in maven package org.apache.spark:spark-core_2.12 CWE-78 CWE-78 Critical CVE-2022-33891 Vulnerability in maven package org.apache.spark:spark-core_2.13 CWE-78 CWE-78 Critical CVE-2022-36537 Vulnerability in maven package org.zkoss.zk:zk High CVE-2023-4863 Vulnerability in npm package electron CWE-787 CWE-787 Critical CVE-2023-5217 Vulnerability in npm package electron CWE-787 CWE-787 Critical CVE-2023-32315 Vulnerability in maven package org.igniterealtime.openfire:xmppserver CWE-22 CWE-22 High CVE-2023-33246 Vulnerability in maven package org.apache.rocketmq:rocketmq-broker CWE-94 CWE-94 Critical CVE-2023-33246 Vulnerability in maven package org.apache.rocketmq:rocketmq-controller CWE-94 CWE-94 Critical CVE-2023-33246 Vulnerability in maven package org.apache.rocketmq:rocketmq-namesrv CWE-94 CWE-94 Critical CVE-2023-44487 Vulnerability in maven package io.helidon.http:helidon-http-http2 High CVE-2023-44487 Vulnerability in maven package io.netty:netty-codec-http2 High CVE-2023-44487 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core High CVE-2023-44487 Vulnerability in maven package org.apache.tomcat:tomcat-coyote High CVE-2023-44487 Vulnerability in maven package org.eclipse.jetty.http2:http2-common High CVE-2023-46604 Vulnerability in maven package org.apache.activemq:activemq-client CWE-502 CWE-502 Critical CVE-2023-46604 Vulnerability in maven package org.apache.activemq:activemq-openwire-legacy CWE-502 CWE-502 Critical CVE-2024-36401 Vulnerability in maven package org.geoserver.web:gs-web-app CWE-95 CWE-95 Critical CVE-2024-36401 Vulnerability in maven package org.geoserver:gs-wfs CWE-95 CWE-95 Critical CVE-2024-36401 Vulnerability in maven package org.geoserver:gs-wms CWE-95 CWE-95 Critical
