Skip to content
OpenAdvisories

Package · Maven

org.apache.portals.jetspeed-2:jetspeed

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.8
    CVE-2016-0710 Public exploit EPSS 52%

    Apache Jetspeed vulnerable to SQL Injection

    Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitrary SQL commands via the (1) role or (2) user parameter to services/usermanager/users/.

    org.apache.portals.jetspeed-2:jetspeed Maven
  • High 7.2
    CVE-2016-0709 Public exploit EPSS 77%

    Path Traversal in Apache Jetspeed

    Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote authenticated administrators to write to arbitrary files, and consequently execute arbitrary code, via a .. (dot dot) in a…

    org.apache.portals.jetspeed-2:jetspeed Maven
  • Medium 6.1
    CVE-2016-0712

    Cross-site Scripting in Apache Jetspeed

    Cross-site scripting (XSS) vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to portal.

    org.apache.portals.jetspeed-2:jetspeed Maven