Skip to content
OpenAdvisories

Ecosystem

Maven

7,126 known vulnerabilities.

Most affected packages

org.jenkins-ci.main:jenkins-core 259 org.apache.tomcat:tomcat 168 com.liferay.portal:release.portal.bom 159 com.liferay.portal:release.dxp.bom 125 org.keycloak:keycloak-services 104 com.fasterxml.jackson.core:jackson-databind 86 org.apache.tomcat.embed:tomcat-embed-core 82 org.apache.struts:struts2-core 60 org.keycloak:keycloak-core 49 org.xwiki.platform:xwiki-platform-oldcore 46 org.apache.tomcat:tomcat-catalina 44 io.undertow:undertow-core 42 org.elasticsearch:elasticsearch 40 net.mingsoft:ms-mcms 39 com.thoughtworks.xstream:xstream 37 org.jenkins-ci.plugins:script-security 37 com.jfinal:jfinal 36 org.apache.tomcat:tomcat-coyote 34 org.apache.solr:solr-core 31 org.springframework.security:spring-security-core 31 org.opencms:opencms-core 31 org.eclipse.jetty:jetty-server 29 org.springframework:spring-webmvc 27 org.bouncycastle:bcprov-jdk14 26 org.keycloak:keycloak-parent 26 org.bouncycastle:bcprov-jdk15on 25 org.apache.openmeetings:openmeetings-parent 25 io.netty:netty-codec-http 24 org.apache.activemq:apache-activemq 23 org.xwiki.platform:xwiki-platform-web-templates 23 org.apache.nifi:nifi 21 org.cloudfoundry.identity:cloudfoundry-identity-server 21 org.apache.activemq:activemq-client 20 org.springframework:spring-webflux 20 org.springframework:spring-core 19 com.liferay.portal:com.liferay.portal.impl 18 org.asynchttpclient:async-http-client 18 com.vaadin:vaadin-bom 18 org.apache.jspwiki:jspwiki-main 18 org.apache.activemq:activemq-all 17
All Critical High Medium Low Exploited only Public exploit

7,117 results · Feed

  • Medium 4.6
    CVE-2025-43785

    Liferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting

    Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 through 7.4.3.128, and Liferay DXP 2024 Q2.0 through 2024.Q2.9, 2024.Q1.1 through 2024.Q1.12, and 7.4 update 45 through update 92 allows remote attackers to execute an arbitrary web sc…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 6.9
    CVE-2025-43786

    Liferay Portal exposes ERC which can lead to exploit the time response attack

    Enumeration of ERC from object entry in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 and 7.4 GA through update 92 allow attackers to determine existe…

    Liferay DXP Portal com.liferay:com.liferay.portal.vulcan.impl Maven
  • Medium 5.3
    CVE-2025-43781

    Liferay Portal is vulnerable to XSS attack through its search bar portlet

    Reflected cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.110 through 7.4.3.128, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.12 allows remote attackers to inject arbitrary web script…

    Liferay DXP Portal com.liferay:com.liferay.portal.search.web Maven
  • Medium 4.6
    CVE-2025-43775

    Liferay Portal is vulnerable to XSS attacks via its remote app title field

    Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.5, 2024.Q2.0 through 2024.Q2.12, 2024.Q1.1 through 2024.Q1.12, and 7.4 GA through update 92 allows remote attackers to inject …

    Liferay DXP Portal com.liferay:com.liferay.client.extension.web Maven
  • Medium 4.6
    CVE-2025-43776

    Liferay Portal and Liferay DXP vulnerable to store Cross-site Scripting

    A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 5.1
    CVE-2025-43777

    Liferay Portal exposes 500 status when attempting login with a deleted client secret

    Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.19 exposes "Internal Serve…

    Liferay DXP Portal com.liferay:com.liferay.portal.security.sso.openid.connect.impl Maven
  • Medium 4.8
    CVE-2025-43778

    Liferay Portal is vulnerable to XSS attack through fieldset name in Kaleo Forms Admin

    A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.11, 2025.Q1.0 through 2025.Q1.16, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and …

    Liferay DXP Portal com.liferay:com.liferay.portal.workflow.kaleo.forms.web Maven
  • Medium 4.8
    CVE-2025-43763

    Liferay Portal is vulnerable to SSRF through custom object attachment fields

    A server-side request forgery (SSRF) vulnerability exist in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.20 that affects custo…

    Liferay DXP Portal com.liferay:com.liferay.object.service Maven
  • High 8.7
    CVE-2025-58365

    XWiki Blog Application: Privilege Escalation (PR) from account through blog content

    The XWiki blog application allows users of the XWiki platform to create and manage blog posts. Prior to version 9.14, the blog application in XWiki allowed remote code execution for any user who has edit right on any page. Normally, these are all logged-in us…

    xwiki-contrib application-blog org.xwiki.contrib.blog:application-blog-ui Maven
  • Medium 6.5
    CVE-2025-58782

    Apache Jackrabbit Core, Apache Jackrabbit JCR Commons: JNDI injection risk with JndiRepositoryFactory

    Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons. This issue affects Apache Jackrabbit Core: from 1.0.0 through 2.22.1; Apache Jackrabbit JCR Commons: from 1.0.0 through 2.22.1. Deployments that accep…

    Apache Software Foundation Apache Jackrabbit Core Apache Jackrabbit JCR Commons jackrabbit Debian Ubuntu Maven
  • Medium 5.3
    CVE-2025-58369

    fs2: Half-shutdown of socket during TLS handshake may result in spin loop on opposite side

    fs2 is a compositional, streaming I/O library for Scala. Versions up to and including 2.5.12, 3.0.0-M1 through 3.12.2, and 3.13.0-M1 through 3.13.0-M6 are vulnerable to denial of service attacks though TLS sessions using fs2-io on the JVM using the fs2.io.net…

    typelevel fs2 co.fs2:fs2-io_3 co.fs2:fs2-io_2.12 Maven
  • Medium 4.3
    CVE-2025-10044

    Keycloak: keycloak error_description injection on error pages

    A flaw was found in Keycloak. Keycloak’s account console and other pages accept arbitrary text in the error_description query parameter. This text is directly rendered in error pages without validation or sanitization. While HTML encoding prevents XSS, an att…

    Red Hat Keycloak Red Hat build of Keycloak 26.2 Red Hat build of Keycloak 26.0 Maven
  • Medium —
    GHSA-c7v7-rqfm-f44j

    Vaadin Platform possible file bypass via upload validation on the server-side

    ### Description When the Vaadin Upload's start listener is used to validate metadata about an incoming upload, it is possible to bypass the upload validation. Users of affected versions should apply the upgrade to a more recent Vaadin version.

    com.vaadin:vaadin Maven
  • Medium —
    GHSA-94g8-xv23-7656

    Vaadin Flow Components possible file bypass via upload validation on the server-side

    ### Description When the Vaadin Upload's start listener is used to validate metadata about an incoming upload, it is possible to bypass the upload validation. Users of affected versions should apply the upgrade to a more recent Vaadin version.

    com.vaadin:vaadin-upload-flow Maven
  • Medium 5.3
    CVE-2025-9467

    Possibility to bypass file upload validation on the server-side

    When the Vaadin Upload's start listener is used to validate metadata about an incoming upload, it is possible to bypass the upload validation. Users of affected versions should apply the following mitigation or upgrade. Releases that have fixed this issue inc…

    vaadin vaadin framework vaadin-upload-flow Maven
  • High 7.1
    CVE-2025-43772

    Liferay Portal Vulnerable to Denial of Service in Kaleo Forms Admin

    Kaleo Forms Admin in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 27, and older unsupported versions does not restrict the saving of request parameters in the portlet session, which allows remote attackers to consume sys…

    Liferay DXP Portal com.liferay:com.liferay.portal.workflow.kaleo.forms.web Maven
  • Medium 6.9
    CVE-2025-58057

    Netty's BrotliDecoder is vulnerable to DoS via zip bomb style attack

    Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In netty-codec-compression versions 4.1.124.Final and below, and netty-codec versions 4.2.4.Final and below,…

    netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  • Low 2.9
    CVE-2025-58056

    Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

    Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In versions 4.1.124.Final, and 4.2.0.Alpha3 through 4.2.4.Final, Netty incorrectly accepts standalone newline ch…

    netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  • Critical 9.3
    CVE-2025-55748 Scanner template

    XWiki Platform's configuration files can be accessed through jsx and sx endpoints

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-2 through 16.10.6, configuration files are accessible through jsx and sx endpoints. It's possible to access and read configurati…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-skin-skinx Maven
  • Critical 9.3
    CVE-2025-55747 Scanner template

    XWiki Platform's configuration files can be accessed through the webjars API

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. This is fixed in version 16.10.7.

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-webjars-api org.xwiki.platform:xwiki-platform-webjars Maven
  • Medium 4.2
    CVE-2025-58460

    Jenkins OpenTelemetry Plugin missing permission check allows capturing credentials

    A missing permission check in Jenkins OpenTelemetry Plugin 3.1543.v8446b_92b_cd64 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, captu…

    Jenkins Project Jenkins OpenTelemetry Plugin io.jenkins.plugins:opentelemetry Web / CMS Maven
  • Medium 4.3
    CVE-2025-58458

    Jenkins Git client Plugin file system information disclosure vulnerability

    In Jenkins Git client Plugin 6.3.2 and earlier, except 6.1.4 and 6.2.1, Git URL field form validation responses differ based on whether the specified file path exists on the controller when specifying `amazon-s3` protocol for use with JGit, allowing attackers…

    Jenkins Project Jenkins Git client Plugin org.jenkins-ci.plugins:git-client Web / CMS Maven
  • Medium 4.3
    CVE-2025-58459

    Jenkins global-build-stats Plugin missing permission check can result in graph IDs being enumerated

    Jenkins global-build-stats Plugin 322.v22f4db_18e2dd and earlier does not perform permission checks in its REST API endpoints, allowing attackers with Overall/Read permission to enumerate graph IDs.

    Jenkins Project Jenkins global-build-stats Plugin org.jenkins-ci.plugins:global-build-stats Web / CMS Maven
  • Critical 9.8
    CVE-2024-43166

    Apache DolphinScheduler Incorrect Default Permissions Vulnerability

    Incorrect Default Permissions vulnerability in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue.

    Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler Maven
  • High 8.8
    CVE-2024-43115

    Apache DolphinScheduler: Alert Script Attack

    Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which f…

    Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler Maven
  • High 7.5
    CVE-2025-9784 Public exploit

    Undertow: undertow madeyoureset http/2 ddos vulnerability

    A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeate…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Wolfi Maven
  • Medium 6.5
    CVE-2025-46047 Public exploit

    Silverpeas Core Username Enumeration Vulnerability

    A User enumeration vulnerability in the /CredentialsServlet/ForgotPassword endpoint in Silverpeas 6.4.1 and 6.4.2 allows remote attackers to determine valid usernames via the Login parameter.

    org.silverpeas.core:silverpeas-core Maven
  • High 7.5
    CVE-2025-3586

    Liferay Portal and DXP Instance Admin can execute code using Objects Actions and Validations

    In Liferay Portal 7.4.3.27 through 7.4.3.42, and Liferay DXP 2024.Q1.1 through 2024.Q1.20, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 update 27 through update 42 (Liferay PaaS, and Liferay Self-Hosted), the Objects module does not restric…

    Liferay DXP Portal com.liferay:com.liferay.object.service Maven
  • Medium 4.6
    CVE-2025-43773

    Liferay Portal allows improper access through the expandoTableLocalService

    Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0, 2025.Q1.0 through 2025.Q1.14, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 has a security …

    Liferay DXP Portal com.liferay:com.liferay.portal.workflow.kaleo.runtime.impl Maven
  • Low 2.7
    CVE-2025-55202

    Opencast has a partial path traversal vulnerability in UI config

    Opencast is a free, open-source platform to support the management of educational audio and video content. In version 18.0 and versions before 17.7, the protections against path traversal attacks in the UI config module are insufficient, still partially allow…

    opencast opencast org.opencastproject:opencast-user-interface-configuration Maven
  • Critical 9.1
    CVE-2025-58059

    Valtimo scripting engine can be used to gain access to sensitive data or resources

    Valtimo is a platform for Business Process Automation. In versions before 12.16.0.RELEASE, and from 13.0.0.RELEASE to before 13.1.2.RELEASE, any admin that can create or modify and execute process-definitions could gain access to sensitive data or resources. …

    valtimo-platform valtimo-backend-libraries com.ritense.valtimo:core Maven
  • Medium 5.8
    CVE-2025-58049

    XWiki PDF export jobs store sensitive cookies unencrypted in job statuses

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions from 14.4.2 to before 16.4.8, 16.5.0-rc-1 to before 16.10.7, and 17.0.0-rc-1 to before 17.4.0-rc-1, the PDF export jobs store sensitive cookie…

    xwiki xwiki-platform org.xwiki.platform:xwiki-platform-export-pdf-api Maven
  • High 8.8
    CVE-2025-26467

    Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)

    Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data …

    Apache Software Foundation Apache Cassandra org.apache.cassandra:cassandra-all cassandra Azure Linux Maven
  • Medium 6.9
    CVE-2025-43764

    Liferay Portal ReDoS with Role Name search in KaleoDesignerPortlet

    Self-ReDoS (Regular expression Denial of Service) exists with Role Name search field of Kaleo Designer portlet JavaScript in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.1, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.1 through 2…

    Liferay DXP Portal com.liferay:com.liferay.portal.workflow.kaleo.designer.web Maven
  • Medium 6.9
    CVE-2025-43765

    Liferay Portal stored cross-site scripting in text field of the web content structure

    A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.13 and 7.4 GA through update 92 allows an remote non-au…

    Liferay DXP Portal com.liferay:com.liferay.journal.service Maven
  • Medium 6.8
    CVE-2025-43766

    Liferay Portal allows unrestricted upload of file in the style books component

    The Liferay Portal 7.4.0 through 7.3.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows the upload of unrestricted files in the style books component t…

    Liferay DXP Portal com.liferay:com.liferay.style.book.web Maven
  • Medium 5.1
    CVE-2025-43767

    Liferay Portal allows open redirect in /c/portal/edit_info_item parameter redirect

    Open Redirect vulnerability in /c/portal/edit_info_item parameter redirect in Liferay Portal 7.4.3.86 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.9, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 update 86 through update 9…

    Liferay DXP Portal com.liferay:com.liferay.info.impl Maven
  • Medium 5.1
    CVE-2025-43768

    Liferay Portal JSONWS API endpoint shares sensitive information

    Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows authenticated users without any permissions to ac…

    Liferay DXP Portal com.liferay.portal:com.liferay.portal.impl Maven
  • Medium 4.6
    CVE-2025-43769

    Liferay Portal vulnerable to Stored XSS in Components portlet

    Stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.8, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows remote attackers to execute …

    Liferay DXP Portal com.liferay:com.liferay.plugins.admin.web Maven
  • Medium 6.9
    CVE-2025-43770

    Liferay Portal vulnerable to Reflected XSS with the referer and forward parameter

    A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.3, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update…

    Liferay DXP Portal com.liferay.portal:com.liferay.portal.kernel Maven