Skip to content
OpenAdvisories

Package · Maven

org.jolokia:jolokia-core

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-1000129 Public exploit Scanner template EPSS 25%

    Cross-site Scripting in Jolokia agent

    An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.

    org.jolokia:jolokia-core Maven
  • Medium —
    CVE-2014-0168

    Cross-Site Request Forgery in Jolokia

    Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.

    org.jolokia:jolokia-core Maven