CPE Details
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:hawt:hawtio:1.4.10:*:*:*:*:*:*:*
Informations
Vendor
hawtProduct
hawtioVersion
1.4.10Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitrary host via the initial /proxy/ substring of a URI. | 9.8 |
Critique |
||
| hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerException with a full stacktrace. An attacker could use this flaw to gather undisclosed information from within hawtio's root. | 7.5 |
Haute |
