Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
java-aodeng records in CISA KEVNo java-aodeng vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 57
A vulnerability was found in java-aodeng Hope-Boot 1.0.0.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00415 · Published 2025-06-24 · No fix listed CWE-601
Priority MEDIUM 56
A vulnerability was found in java-aodeng Hope-Boot 1.0.0 and classified as problematic.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00463 · Published 2025-06-24 · No fix listed CWE-79
Priority MEDIUM 50
Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00541 · Published 2025-05-05 · No fix listed CWE-284
Open these records in search →