Skip to content
OpenAdvisories

Package · Maven

org.apache.geronimo.plugins:console

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium —
    CVE-2009-0038 Public exploit EPSS 18%

    Apache Geronimo Application Server multiple cross-site scripting (XSS) vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4) descript…

  • Medium —
    CVE-2009-0039 Public exploit EPSS 11%

    Apache Geronimo Application Server CSRF vulnerabilities

    Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to hijack the authentication of administrators for requests that (1) change the web adm…