Skip to content
OpenAdvisories

Package · Maven

org.jolokia:jolokia-core

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 8.1
    CVE-2018-10899

    Cross-Site Request Forgery in Jolokia

    A flaw was found in Jolokia versions from 1.2 to before 1.6.1. Affected versions are vulnerable to a system-wide CSRF. This holds true for properly configured instances with strict checking for origin and referrer headers. This could result in a Remote Code E…

    jolokia jolokia org.jolokia:jolokia-core Maven
  • High 8.1
    CVE-2018-1000130 Scanner template EPSS 74%

    Injection in Jolokia agent

    A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server.

    org.jolokia:jolokia-core Maven
  • Medium 6.1
    CVE-2018-1000129 Public exploit Scanner template EPSS 25%

    Cross-site Scripting in Jolokia agent

    An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.

    org.jolokia:jolokia-core Maven
  • Medium —
    CVE-2014-0168

    Cross-Site Request Forgery in Jolokia

    Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.

    org.jolokia:jolokia-core Maven