codehaus-plexus

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

codehaus-plexus records in CISA KEV

No codehaus-plexus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Plexus-utils 4 records HIGH Plexus-archiver 2 records HIGH

Records

4 records in Plexus-utils · all components

TI-2022-03885 CVE-2022-4244 · GHSA-g6ph-x5wf-g337

Codehaus-plexus: directory traversal

HIGH 72

A flaw was found in codeplex-codehaus.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01347 Published 2023-09-25 Partial fix · 3.0.24 CWE-22

TI-2017-14696 CVE-2017-1000487 · GHSA-8vhq-qq4p-grq3

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not…

MEDIUM 51

Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0649 Published 2018-01-03 Partial fix · 3.0.16 CWE-78

TI-2025-41106 CVE-2025-67030 · GHSA-6fmv-xxpf-w3cw

Directory Traversal vulnerability in the extractFile method of…

MEDIUM 41

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00689 Published 2026-03-25 Partial fix · 4.0.3, 3.6.1 CWE-22

TI-2022-03886 CVE-2022-4245 · GHSA-jcwr-x25h-x5fh

Codehaus-plexus: xml external entity (xxe) injection

LOW 21

A flaw was found in codehaus-plexus.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00694 Published 2023-09-25 Partial fix · 3.0.24 CWE-91

Open these records in search →

Critical	2
High	2
Medium	2
Low	0
No CVSS	0