JavaMelody

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

JavaMelody records in CISA KEV

No JavaMelody vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2016-09374 CVE-2016-20102 · GHSA-4j49-rwqh-4j7w

Reflected cross-site scripting in JavaMelody graph parameter

LOW 23

JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph parameter of /monitoring?part=graph.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00264 Published 2026-10-20 Fixed in 1.60.0 CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0