Maven Package Vulnerabilities - Exploit Intel

Skip to content

Packages

org.jenkins-ci.main:jenkins-core257 vulnerabilities
org.apache.tomcat:tomcat160 vulnerabilities
com.liferay.portal:release.portal.bom159 vulnerabilities
com.liferay.portal:release.dxp.bom125 vulnerabilities
org.keycloak:keycloak-services97 vulnerabilities
com.fasterxml.jackson.core:jackson-databind80 vulnerabilities
org.apache.tomcat.embed:tomcat-embed-core74 vulnerabilities
org.apache.struts:struts2-core60 vulnerabilities
org.keycloak:keycloak-core50 vulnerabilities
org.xwiki.platform:xwiki-platform-oldcore46 vulnerabilities
org.elasticsearch:elasticsearch44 vulnerabilities
net.mingsoft:ms-mcms39 vulnerabilities
org.apache.tomcat:tomcat-catalina39 vulnerabilities
io.undertow:undertow-core38 vulnerabilities
com.thoughtworks.xstream:xstream37 vulnerabilities
com.jfinal:jfinal36 vulnerabilities
org.jenkins-ci.plugins:script-security35 vulnerabilities
org.apache.solr:solr-core31 vulnerabilities
org.apache.tomcat:tomcat-coyote31 vulnerabilities
org.opencms:opencms-core31 vulnerabilities
org.springframework.security:spring-security-core31 vulnerabilities
org.eclipse.jetty:jetty-server29 vulnerabilities
org.bouncycastle:bcprov-jdk1426 vulnerabilities
org.apache.openmeetings:openmeetings-parent25 vulnerabilities
org.keycloak:keycloak-parent25 vulnerabilities

Maven vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2022-45802CRITICAL	Apache StreamPark (incubating): Upload any file to any directory Streampark allows any users to upload a jar as application, but there is no mandatory verification of the uploaded file type, causing users to upload some high-risk files, and may upload them to any directory, Users of the affected versions should upgrade to Apache StreamPark 2.0.0 or later CWE-22 CWE-434May 1, 2023	CVSS9.8v3.1	EPSS1.31%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX