Skip to content
OpenAdvisories

Package · Maven

org.apache.juddi:juddi-client

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.1
    CVE-2018-1307

    Apache juddi-client vulnerable to XML External Entity (XXE)

    In Apache jUDDI 3.2 through 3.3.4, if using the WADL2Java or WSDL2Java classes, which parse a local or remote XML document and then mediates the data structures into UDDI data structures, there are little protections present against entity expansion and DTD t…

    Apache Software Foundation Apache jUDDI org.apache.juddi:juddi-client Maven
  • Medium 6.1
    CVE-2015-5241

    Moderate severity vulnerability that affects org.apache.juddi:juddi-client

    After logging into the portal, the logout jsp page redirects the browser back to the login page after. It is feasible for malicious users to redirect the browser to an unintended web page in Apache jUDDI 3.1.2, 3.1.3, 3.1.4, and 3.1.5 when utilizing the portl…

    Apache Software Foundation Apache jUDDI org.apache.juddi:juddi-client Maven