Jolokia » Jolokia : Security Vulnerabilities

An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.
Max Base Score
6.1
Published 2018-03-14
Updated 2019-03-07
EPSS 0.23%
A flaw was found in Jolokia versions from 1.2 to before 1.6.1. Affected versions are vulnerable to a system-wide CSRF. This holds true for properly configured instances with strict checking for origin and referrer headers. This could result in a Remote Code Execution attack.
Max Base Score
8.8
Published 2019-08-01
Updated 2021-08-04
EPSS 0.92%
Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.
Max Base Score
6.8
Published 2014-10-06
Updated 2014-10-07
EPSS 0.18%
3 vulnerabilities found
This web site uses cookies for managing your session and website analytics (Google analytics) purposes as described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!