All products

net.bull.javamelody:javamelody-core

Maven · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Java Melody vulnerable to cross-site scriptingCVE-2016-1000273 · GHSA-CQHR-JQVC-QW9P net.bull.javamelody:javamelody-core Maven Critical Fix reported
Improper Neutralization of Input During Web Page Generation in JavaMelodyCVE-2013-4378 · GHSA-P4MX-P49M-8RW4 net.bull.javamelody:javamelody-core Maven Medium Fix reported
Cross-site Scripting in JavaMelodyCVE-2018-12432 · GHSA-G66Q-GRXC-64J3 net.bull.javamelody:javamelody-core Maven Medium Fix reported
JavaMelody has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.CVE-2018-15531 · GHSA-6FVX-R7HX-3VH6 net.bull.javamelody:javamelody-core Maven Critical Fix reported