Jolokia 1.3.7

CPE Details

Jolokia 1.3.7
jolokia
jolokia
1.3.7
2019-07-29
11h42 +00:00
2019-07-29
11h42 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:jolokia:jolokia:1.3.7:*:*:*:*:*:*:*

Informations

Vendor

jolokia

Product

jolokia

Version

1.3.7

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2018-10899 2019-08-01 11h27 +00:00 A flaw was found in Jolokia versions from 1.2 to before 1.6.1. Affected versions are vulnerable to a system-wide CSRF. This holds true for properly configured instances with strict checking for origin and referrer headers. This could result in a Remote Code Execution attack.
8.8
Haute
CVE-2018-1000129 2018-03-14 12h00 +00:00 An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.
6.1
Moyen