| Max CVSS | 7.9 | Min CVSS | 5.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-8028 | 5.1 |
In Pivotal Spring-LDAP versions 1.3.0 - 2.3.1, when connected to some LDAP servers, when no additional attributes are bound, and when using LDAP BindAuthenticator with org.springframework.ldap.core.support.DefaultTlsDirContextAuthenticationStrategy a
|
20-01-2021 - 15:15 | 27-11-2017 - 10:29 | |
| CVE-2017-5662 | 7.9 |
In Apache Batik before 1.9, files lying on the filesystem of the server which uses batik can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable ap
|
20-10-2020 - 22:15 | 18-04-2017 - 14:59 | |
| CVE-2017-2617 | 6.8 |
hawtio before version 1.5.5 is vulnerable to remote code execution via file upload. An attacker could use this vulnerability to upload a crafted file which could be executed on a target machine where hawtio is deployed.
|
09-10-2019 - 23:26 | 22-05-2018 - 17:29 | |
| CVE-2017-12634 | 7.5 |
The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.
|
24-05-2019 - 11:29 | 15-11-2017 - 15:29 | |
| CVE-2017-12633 | 7.5 |
The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.
|
24-05-2019 - 11:29 | 15-11-2017 - 15:29 |