Read the docs

Java-websocket Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Java-websocket Project records in CISA KEV

No Java-websocket Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Java-websocket 1 record MEDIUM

Records

1 record in Java-websocket · all components

TI-2020-08924 CVE-2020-11050 · GHSA-gw55-jm4h-x339

Improper Validation of Certificate with Host Mismatch in Java-WebSocket

Priority MEDIUM 40

In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00791 Published 2020-05-07 Fixed in 1.5.0 CWE-297
Open these records in search →