Vendor archive

javamelody_project CVEs

Beta · best-effort

2 CVEs tagged to vendor javamelody_project — 1 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

CVE-2018-15531

Published Sep 26, 2018

JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Published Jun 14, 2018

JavaMelody through 1.60.0 has XSS via the counter parameter in a clear_counter action to the /monitoring URI.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1