jolokia records
4 published records for vendor jolokia.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
54Plan | CVE-2018-1000130Proof of concept | A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java cjolokia · webarchive agent · CWE-74 | High8.1 | — | 73.7% | Mar 14, 2018 |
36Monitor | CVE-2018-10899No exploit | A flaw was found in Jolokia versions from 1.2 to before 1.6.1.jolokia · jolokia · CWE-20 | High8.8 | — | 2.6% | Aug 1, 2019 |
31Monitor | CVE-2018-1000129Proof of concept | An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript ijolokia · jolokia · CWE-79 | Medium6.1 | — | 24.6% | Mar 14, 2018 |
27Monitor | CVE-2014-0168No exploit | Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for rejolokia · jolokia · CWE-352 | Medium6.8 | — | 0.7% | Oct 6, 2014 |
- CVE-2018-100013054Plan
A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java c
HighCVSS 8.1Proof of conceptEPSS 73%jolokia · webarchive agentMar 14, 2018
- CVE-2018-1089936Monitor
A flaw was found in Jolokia versions from 1.2 to before 1.6.1.
HighCVSS 8.8No exploitEPSS 2%jolokia · jolokiaAug 1, 2019
- CVE-2018-100012931Monitor
An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript i
MediumCVSS 6.1Proof of conceptEPSS 24%jolokia · jolokiaMar 14, 2018
- CVE-2014-016827Monitor
Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for re
MediumCVSS 6.8No exploitEPSS 0%jolokia · jolokiaOct 6, 2014