Skip to content
OpenAdvisories

Package · Maven

org.apache.tomee:tomee

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2020-11969

    Missing Authentication for Critical Function in Apache TomEE

    If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not include authentication. This affects Apache TomEE 8.0.0-M1 - 8.0.1, Apache TomEE 7.…

    org.apache.tomee:tomee Maven