CVE-2019-10086
High · 7.3CVSS
7.3
EPSS
28.4%
Published
Aug 20, 2019
CISA due date
—
The record
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | commons-beanutils:commons-beanutils | 0 | 1.9.4 |
| AlmaLinux:8 | ant | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-antlr | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-apache-bcel | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-apache-bsf | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-apache-log4j | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-apache-oro | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-apache-regexp | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-apache-resolver | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-apache-xalan2 | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-commons-logging | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-commons-net | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-contrib | 0 | 1.0-0.32.b3.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-contrib-javadoc | 0 | 1.0-0.32.b3.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-javadoc | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-javamail | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-jdepend | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-jmf | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-jsch | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-junit | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-lib | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-manual | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-swing | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-testutil | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ant-xz | 0 | 1.10.5-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | antlr-C++ | 0 | 2.7.7-56.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | antlr-C++ | 0 | 2.7.7-56.module_el8.5.0+197+0c7f4e0a |
| AlmaLinux:8 | antlr-C++ | 0 | 2.7.7-56.module_el8.6.0+3182+f8468cf8 |
| AlmaLinux:8 | antlr-javadoc | 0 | 2.7.7-56.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | antlr-manual | 0 | 2.7.7-56.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | antlr-tool | 0 | 2.7.7-56.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | aopalliance | 0 | 1.0-17.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | aopalliance-javadoc | 0 | 1.0-17.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-beanutils | 0 | 1.9.3-5.module_el8.10.0+4020+7deec6e4 |
| AlmaLinux:8 | apache-commons-beanutils-javadoc | 0 | 1.9.3-5.module_el8.10.0+4020+7deec6e4 |
| AlmaLinux:8 | apache-commons-cli | 0 | 1.4-4.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-cli-javadoc | 0 | 1.4-4.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-codec | 0 | 1.11-3.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-codec-javadoc | 0 | 1.11-3.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-collections | 0 | 3.2.2-10.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-collections-javadoc | 0 | 3.2.2-10.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-collections-testframework | 0 | 3.2.2-10.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-compress | 0 | 1.18-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-compress-javadoc | 0 | 1.18-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-exec | 0 | 1.3-8.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-exec-javadoc | 0 | 1.3-8.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-io | 0 | 1:2.6-3.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-io-javadoc | 0 | 1:2.6-3.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-jxpath | 0 | 1.3-29.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-jxpath-javadoc | 0 | 1.3-29.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-lang | 0 | 2.6-21.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-lang-javadoc | 0 | 2.6-21.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-lang3 | 0 | 3.7-3.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-lang3-javadoc | 0 | 3.7-3.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-logging | 0 | 1.2-13.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-logging-javadoc | 0 | 1.2-13.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-net | 0 | 3.6-3.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-net-javadoc | 0 | 3.6-3.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-commons-parent | 0 | 43-2.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-ivy | 0 | 2.4.0-14.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-ivy-javadoc | 0 | 2.4.0-14.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-parent | 0 | 19-2.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | apache-resource-bundles | 0 | 2-20.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | aqute-bnd | 0 | 3.5.0-4.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | aqute-bnd-javadoc | 0 | 3.5.0-4.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | aqute-bndlib | 0 | 3.5.0-4.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | assertj-core | 0 | 3.8.0-2.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | assertj-core-javadoc | 0 | 3.8.0-2.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | atinject | 0 | 1-28.20100611svn86.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | atinject-javadoc | 0 | 1-28.20100611svn86.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | atinject-tck | 0 | 1-28.20100611svn86.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | bcel | 0 | 6.2-2.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | bcel-javadoc | 0 | 6.2-2.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | beust-jcommander | 0 | 1.71-5.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | beust-jcommander-javadoc | 0 | 1.71-5.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | bnd-maven-plugin | 0 | 3.5.0-4.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | bsf | 0 | 2.4.0-30.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | bsf-javadoc | 0 | 2.4.0-30.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | bsh | 0 | 2.0-13.b6.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | bsh-javadoc | 0 | 2.0-13.b6.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | bsh-manual | 0 | 2.0-13.b6.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | byaccj | 0 | 1.15-17.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | byaccj | 0 | 1.15-17.module_el8.5.0+197+0c7f4e0a |
| AlmaLinux:8 | byaccj | 0 | 1.15-17.module_el8.6.0+3182+f8468cf8 |
| AlmaLinux:8 | cal10n | 0 | 0.8.1-7.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | cal10n-javadoc | 0 | 0.8.1-7.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | cdi-api | 0 | 1.2-8.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | cdi-api-javadoc | 0 | 1.2-8.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | cglib | 0 | 3.2.4-7.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | cglib-javadoc | 0 | 3.2.4-7.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | easymock | 0 | 3.5-4.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | easymock-javadoc | 0 | 3.5-4.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | exec-maven-plugin | 0 | 1.6.0-3.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | exec-maven-plugin-javadoc | 0 | 1.6.0-3.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | felix-osgi-compendium | 0 | 1.4.0-26.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | felix-osgi-compendium-javadoc | 0 | 1.4.0-26.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | felix-osgi-core | 0 | 1.4.0-23.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | felix-osgi-core-javadoc | 0 | 1.4.0-23.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | felix-osgi-foundation | 0 | 1.2.0-23.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | felix-osgi-foundation-javadoc | 0 | 1.2.0-23.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | felix-parent | 0 | 4-5.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | felix-utils | 0 | 1.10.4-2.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | felix-utils-javadoc | 0 | 1.10.4-2.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | forge-parent | 0 | 38-11.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | fusesource-pom | 0 | 1.11-3.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | geronimo-annotation | 0 | 1.0-23.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | geronimo-annotation-javadoc | 0 | 1.0-23.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | geronimo-jms | 0 | 1.1.1-25.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | geronimo-jms-javadoc | 0 | 1.1.1-25.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | geronimo-jpa | 0 | 1.1.1-21.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | geronimo-jpa-javadoc | 0 | 1.1.1-21.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | geronimo-parent-poms | 0 | 1.6-25.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | glassfish-annotation-api | 0 | 1.2-13.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | glassfish-annotation-api-javadoc | 0 | 1.2-13.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | glassfish-el | 0 | 3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | glassfish-el-api | 0 | 3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | glassfish-el-javadoc | 0 | 3.0.1-0.7.b08.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | glassfish-jsp-api | 0 | 2.3.2-0.9.b01.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | glassfish-jsp-api-javadoc | 0 | 2.3.2-0.9.b01.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | glassfish-legal | 0 | 1.1-11.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | glassfish-master-pom | 0 | 8-11.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | glassfish-servlet-api | 0 | 3.1.0-14.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | glassfish-servlet-api-javadoc | 0 | 3.1.0-14.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | google-guice | 0 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | google-guice-javadoc | 0 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | guava20 | 0 | 20.0-8.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | guava20-javadoc | 0 | 20.0-8.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | guava20-testlib | 0 | 20.0-8.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | guice-assistedinject | 0 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | guice-bom | 0 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | guice-extensions | 0 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | guice-grapher | 0 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | guice-jmx | 0 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | guice-jndi | 0 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | guice-multibindings | 0 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | guice-parent | 0 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | guice-servlet | 0 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | guice-testlib | 0 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | guice-throwingproviders | 0 | 4.1-11.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | hamcrest | 0 | 1.3-23.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | hamcrest-core | 0 | 1.3-23.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | hamcrest-demo | 0 | 1.3-23.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | hamcrest-javadoc | 0 | 1.3-23.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | hawtjni | 0 | 1.16-2.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | hawtjni-javadoc | 0 | 1.16-2.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | hawtjni-runtime | 0 | 1.16-2.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | httpcomponents-client | 0 | 4.5.5-4.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | httpcomponents-client-cache | 0 | 4.5.5-4.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | httpcomponents-client-javadoc | 0 | 4.5.5-4.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | httpcomponents-core | 0 | 4.4.10-4.module_el8.10.0+4020+7deec6e4 |
| AlmaLinux:8 | httpcomponents-core-javadoc | 0 | 4.4.10-4.module_el8.10.0+4020+7deec6e4 |
| AlmaLinux:8 | httpcomponents-project | 0 | 9-2.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | isorelax | 0 | 1:0-0.23.release20050331.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | isorelax-javadoc | 0 | 1:0-0.23.release20050331.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | ivy-local | 0 | 5.3.0-2.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jakarta-commons-httpclient | 0 | 1:3.1-28.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jakarta-commons-httpclient-demo | 0 | 1:3.1-28.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jakarta-commons-httpclient-javadoc | 0 | 1:3.1-28.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jakarta-commons-httpclient-manual | 0 | 1:3.1-28.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jakarta-oro | 0 | 2.0.8-23.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jakarta-oro-javadoc | 0 | 2.0.8-23.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jansi | 0 | 1.17.1-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jansi-javadoc | 0 | 1.17.1-1.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jansi-native | 0 | 1.7-7.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jansi-native | 0 | 1.7-7.module_el8.5.0+197+0c7f4e0a |
| AlmaLinux:8 | jansi-native | 0 | 1.7-7.module_el8.6.0+3182+f8468cf8 |
| AlmaLinux:8 | jansi-native-javadoc | 0 | 1.7-7.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | java_cup | 0 | 1:0.11b-8.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | java_cup-javadoc | 0 | 1:0.11b-8.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | java_cup-manual | 0 | 1:0.11b-8.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | javacc | 0 | 7.0.2-6.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | javacc-demo | 0 | 7.0.2-6.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | javacc-javadoc | 0 | 7.0.2-6.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | javacc-manual | 0 | 7.0.2-6.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | javacc-maven-plugin | 0 | 2.6-25.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | javacc-maven-plugin-javadoc | 0 | 2.6-25.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | javamail | 0 | 1.5.2-7.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | javamail-javadoc | 0 | 1.5.2-7.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | javapackages-filesystem | 0 | 5.3.0-2.module_el8.6.0+3333+6f2999f0 |
| AlmaLinux:8 | javapackages-local | 0 | 5.3.0-2.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | javapackages-tools | 0 | 5.3.0-2.module_el8.6.0+3333+6f2999f0 |
| AlmaLinux:8 | javassist | 0 | 3.18.1-8.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | javassist-javadoc | 0 | 3.18.1-8.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jaxen | 0 | 1.1.6-18.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jaxen-demo | 0 | 1.1.6-18.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jaxen-javadoc | 0 | 1.1.6-18.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jboss-interceptors-1.2-api | 0 | 1.0.0-8.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jboss-interceptors-1.2-api-javadoc | 0 | 1.0.0-8.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jboss-parent | 0 | 20-4.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jcl-over-slf4j | 0 | 1.7.25-4.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jdepend | 0 | 2.9.1-18.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jdepend-demo | 0 | 2.9.1-18.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jdepend-javadoc | 0 | 2.9.1-18.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jdependency | 0 | 1.2-2.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jdependency-javadoc | 0 | 1.2-2.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jdom | 0 | 1.1.3-17.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jdom-demo | 0 | 1.1.3-17.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jdom-javadoc | 0 | 1.1.3-17.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jdom2 | 0 | 2.0.6-12.module_el8.0.0+6004+2fc32706 |
| AlmaLinux:8 | jdom2-javadoc | 0 | 2.0.6-12.module_el8.0.0+6004+2fc32706 |
Related vulnerabilities
- CVE-2025-48734 Apache Commons Improper Access Control vulnerability Also affects commons-beanutils:commons-beanutils
- CVE-2014-0114 Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache… Also affects commons-beanutils:commons-beanutils
- CVE-2025-52999 jackson-core contains core low-level incremental ("streaming") parser and generator… Also affects apache-commons-collections
- CVE-2026-114724 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection… CWE-502
- CVE-2026-112081 A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. CWE-502
- CVE-2026-96745 Deserialization of untrusted data in the command monitoring support of the MongoDB PHP… CWE-502
- CVE-2026-62107 Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions. CWE-502
- CVE-2026-62103 Unauthenticated PHP Object Injection in Everest Forms <= 3.6.0 versions. CWE-502