Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache TomEE

39 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2018-8031

    Apache TomEE console vulnerable to Cross-site Scripting

    The Apache TomEE console (tomee-webapp) has a XSS vulnerability which could allow javascript to be executed if the user is given a malicious URL. This web application is typically used to add TomEE features to a Tomcat installation. The TomEE bundles do not s…

    Apache Software Foundation Apache TomEE org.apache.tomee:tomee-webapp Maven