Javamelody Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Javamelody Project records in CISA KEV

No Javamelody Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2018-11077 CVE-2018-15531 · GHSA-6fvx-r7hx-3vh6

HIGH 65

JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.27873 Published 2018-09-26 Fixed in 1.74.0 CWE-611

TI-2018-08924 CVE-2018-12432 · GHSA-g66q-grxc-64j3

LOW 28

JavaMelody through 1.60.0 has XSS via the counter parameter in a clear_counter action to the /monitoring URI.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00696 Published 2018-06-14 Fixed in 1.61.0 CWE-79