IR
Product
Insurance Rules Palette
32
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 20Medium 7Low 1
Watch
Add Insurance Rules Palette to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10683 | 9.8 | May 1 | dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks Affected: 11.1.0 through 11.3.0; 10.2.0; 10.2.4; 11.0.2 |
| CVE-2018-1275 | 9.8 | Apr 11 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a… Affected: 10.0; 10.1; 10.2; 11.0; 11.1 |
| CVE-2018-1270 | 9.8 | Apr 6 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a… Affected: 10.0; 10.1; 10.2; 11.0; 11.1 |
| CVE-2017-5645 | 9.8 | Apr 17 | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary… Affected: 10.0; 10.1; 10.2; 11.0; 11.1 |
Showing 4