Codehaus

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Codehaus records in CISA KEV

No Codehaus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xfire 1 record LOW

Records

2 records

TI-2018-16132 CVE-2018-1002200 · GHSA-hcxq-x77q-3469

Path traversal in Codehaus plexus-archiver

LOW 38

plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.11579 Published 2018-07-25 Partial fix · 3.6.0 CWE-22

TI-2012-04858 CVE-2012-5817 · GHSA-5jc8-8xhv-g8qm

Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and…

LOW 34

Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName fi…

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00778 Published 2012-11-04 No fix listed CWE-295

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0