Maven Package Vulnerabilities - Exploit Intel

Skip to content

Packages

org.jenkins-ci.main:jenkins-core257 vulnerabilities
org.apache.tomcat:tomcat160 vulnerabilities
com.liferay.portal:release.portal.bom159 vulnerabilities
com.liferay.portal:release.dxp.bom125 vulnerabilities
org.keycloak:keycloak-services97 vulnerabilities
com.fasterxml.jackson.core:jackson-databind80 vulnerabilities
org.apache.tomcat.embed:tomcat-embed-core74 vulnerabilities
org.apache.struts:struts2-core60 vulnerabilities
org.keycloak:keycloak-core50 vulnerabilities
org.xwiki.platform:xwiki-platform-oldcore46 vulnerabilities
org.elasticsearch:elasticsearch44 vulnerabilities
net.mingsoft:ms-mcms39 vulnerabilities
org.apache.tomcat:tomcat-catalina39 vulnerabilities
io.undertow:undertow-core38 vulnerabilities
com.thoughtworks.xstream:xstream37 vulnerabilities
com.jfinal:jfinal36 vulnerabilities
org.jenkins-ci.plugins:script-security35 vulnerabilities
org.apache.solr:solr-core31 vulnerabilities
org.apache.tomcat:tomcat-coyote31 vulnerabilities
org.opencms:opencms-core31 vulnerabilities
org.springframework.security:spring-security-core31 vulnerabilities
org.eclipse.jetty:jetty-server29 vulnerabilities
org.bouncycastle:bcprov-jdk1426 vulnerabilities
org.apache.openmeetings:openmeetings-parent25 vulnerabilities
org.keycloak:keycloak-parent25 vulnerabilities

Maven vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2023-35042CRITICAL	GeoServer RCE due to improper control of generation of code in jai-ext`Jiffle` map algebra language GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:LiteralData within a wps:Execute request, as exploited in the wild in June 2023. NOTE: the vendor states that they are unable to reproduce this in any version. Jun 12, 2023	CVSS9.8v3.1	EPSS43.2%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX