CVE-2013-1777
Published Jul 11, 2013The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0.0.3 and other products, does not proper…
Vendor/product archive
apache / geronimo CVEs
Beta · best-effort11 CVEs tagged to apache / geronimo — 3 Critical, 3 High, 4 Medium, 1 Low, 0 Unrated.
CVE-2011-5034
Published Dec 30, 2011Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to…
CVE-2010-1632
Published Jun 22, 2010Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server (WAS) 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for…
CVE-2009-0039
Published Apr 17, 2009Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to hija…
CVE-2009-0038
Published Apr 17, 2009Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbi…
CVE-2008-5518
Published Apr 17, 2009Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload…
CVE-2008-0732
Published Feb 12, 2008The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or direct…
CVE-2007-5797
Published Nov 3, 2007SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attemp…
CVE-2007-5085
Published Sep 26, 2007Unspecified vulnerability in the management EJB (MEJB) in Apache Geronimo before 2.0.2 allows remote attackers to bypass authentication and obtain "access to Geronimo internals" v…
CVE-2007-4548
Published Aug 27, 2007The login method in LoginModule implementations in Apache Geronimo 2.0 does not throw FailedLoginException for failed logins, which allows remote attackers to bypass authenticatio…
CVE-2006-0254
Published Jan 18, 2006Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and…
Showing 1-11 of 11 CVEsPage 1 of 1