Intellij Idea
Approved changes feed: RSS · Atom
cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Jetbrains (b1b7db7a-bd16-5477-8e89-fb64c5636fcd) |
|---|---|
| Product | Intellij Idea (1ba35c11-bf17-5833-9a9f-5d24915dfde2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/jetbrains/intellij-community |
purl2cpe | 2026-06-01 10:11:31.464724 |
pkg:jetbrains/idea |
purl2cpe | 2026-06-01 10:11:31.464727 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-49383 |
vulnerable | 2026-06-03 15:26:24.132757 |
Details available
LOW (3.3)
In JetBrains IntelliJ IDEA before 2026.1 xXE in the UI Designer form parser was possible
Published: 2026-05-29T18:15:53.479Z
Updated: 2026-05-29T19:27:42.014Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49382 |
vulnerable | 2026-06-03 15:26:24.132561 |
Details available
MEDIUM (4.5)
In JetBrains IntelliJ IDEA before 2026.1 code execution was possible via template injection in the Copyright plugin
Published: 2026-05-29T18:15:52.223Z
Updated: 2026-05-29T19:28:03.037Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49367 |
vulnerable | 2026-06-03 15:26:24.127178 |
Details available
HIGH (8)
In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account
Published: 2026-05-29T18:15:46.046Z
Updated: 2026-05-30T03:57:44.022Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-49366 |
vulnerable | 2026-06-03 15:26:24.126853 |
Details available
HIGH (7.8)
In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion
Published: 2026-05-29T18:15:45.443Z
Updated: 2026-05-30T03:57:38.324Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-41882 |
vulnerable | 2026-06-03 15:23:36.290852 |
Details available
HIGH (7.4)
In JetBrains IntelliJ IDEA before 2024.3.7.1,
2025.1.7.1,
2025.2.6.2,
2025.3.4.1,
2026.1.1 reading arbitrary local files was possible via built-in web server
Published: 2026-04-30T11:05:58.236Z
Updated: 2026-04-30T13:05:06.370Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-68269 |
vulnerable | 2026-06-03 15:11:03.047831 |
Details available
MEDIUM (5.4)
In JetBrains IntelliJ IDEA before 2025.3 missing confirmation allowed opening of untrusted remote projects over SSH
Published: 2025-12-16T15:27:32.582Z
Updated: 2025-12-16T21:37:21.234Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57730 |
vulnerable | 2026-06-03 15:04:59.917252 |
Details available
MEDIUM (5.2)
In JetBrains IntelliJ IDEA before 2025.2 hTML injection was possible via Remote Development feature
Published: 2025-08-20T09:13:59.164Z
Updated: 2025-08-20T15:19:37.239Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57729 |
vulnerable | 2026-06-03 15:04:59.917007 |
Details available
MEDIUM (6.5)
In JetBrains IntelliJ IDEA before 2025.2 unexpected plugin startup was possible due to automatic LSP server start
Published: 2025-08-20T09:13:58.579Z
Updated: 2026-02-26T17:48:25.319Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57728 |
vulnerable | 2026-06-03 15:04:59.916742 |
Details available
MEDIUM (6.5)
In JetBrains IntelliJ IDEA before 2025.2 improper access control allowed Code With Me guest to discover hidden files
Published: 2025-08-20T09:13:57.934Z
Updated: 2025-08-20T15:20:52.623Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-57727 |
vulnerable | 2026-06-03 15:04:59.916406 |
Details available
MEDIUM (4.7)
In JetBrains IntelliJ IDEA before 2025.2 credentials disclosure was possible via remote reference
Published: 2025-08-20T09:13:57.151Z
Updated: 2025-08-20T15:21:13.202Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32054 |
vulnerable | 2026-06-03 15:00:39.867692 |
Details available
LOW (3.3)
In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file
Published: 2025-04-03T16:48:35.468Z
Updated: 2025-04-03T18:03:21.211Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46970 |
vulnerable | 2026-06-03 14:57:00.270948 |
Details available
LOW (3.3)
In JetBrains IntelliJ IDEA before 2024.1 hTML injection via the project name was possible
Published: 2024-09-16T10:32:48.632Z
Updated: 2024-09-16T13:29:49.021Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-37051 |
vulnerable | 2026-06-03 14:56:05.580368 |
Details available
CRITICAL (9.3)
GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4
Published: 2024-06-10T15:58:06.021Z
Updated: 2025-02-13T17:52:58.741Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24941 |
vulnerable | 2026-06-03 14:55:06.154504 |
Details available
MEDIUM (6.1)
In JetBrains IntelliJ IDEA before 2023.3.3 a plugin for JetBrains Space was able to send an authentication token to an inappropriate URL
Published: 2024-02-06T09:21:30.981Z
Updated: 2024-08-01T23:36:20.613Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24940 |
vulnerable | 2026-06-03 14:55:06.154071 |
Details available
LOW (2.8)
In JetBrains IntelliJ IDEA before 2023.3.3 path traversal was possible when unpacking archives
Published: 2024-02-06T09:21:30.488Z
Updated: 2025-05-15T19:44:43.563Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51655 |
vulnerable | 2026-06-03 14:53:38.193066 |
Details available
MEDIUM (6.3)
In JetBrains IntelliJ IDEA before 2023.3.2 code execution was possible in Untrusted Project mode via a malicious plugin repository specified in the project configuration
Published: 2023-12-21T09:57:04.395Z
Updated: 2024-08-02T22:40:34.145Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39261 |
vulnerable | 2026-06-03 14:52:38.103193 |
Details available
MEDIUM (5.2)
In JetBrains IntelliJ IDEA before 2023.2 plugin for Space was requesting excessive permissions
Published: 2023-07-26T12:14:12.180Z
Updated: 2024-10-23T15:40:10.411Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-38069 |
vulnerable | 2026-06-03 14:52:30.268731 |
Details available
LOW (3.3)
In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases
Published: 2023-07-12T12:48:23.129Z
Updated: 2024-10-22T17:59:39.959Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48433 |
vulnerable | 2026-06-03 14:48:33.523197 |
Details available
MEDIUM (6.1)
In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server.
Published: 2023-03-29T12:07:22.996Z
Updated: 2025-02-12T16:22:14.615Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48432 |
vulnerable | 2026-06-03 14:48:33.522892 |
Details available
MEDIUM (5.2)
In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.
Published: 2023-03-29T12:07:20.510Z
Updated: 2025-02-12T16:22:37.471Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48431 |
vulnerable | 2026-06-03 14:48:33.522565 |
Details available
MEDIUM (4.5)
In JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the “Trust Project” confirmation.
Published: 2023-03-29T12:07:17.183Z
Updated: 2025-02-12T16:22:58.700Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48430 |
vulnerable | 2026-06-03 14:48:33.522173 |
Details available
MEDIUM (5.5)
In JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview.
Published: 2023-03-29T12:07:13.119Z
Updated: 2025-02-12T16:23:21.483Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47896 |
vulnerable | 2026-06-03 14:48:27.864049 |
Details available
MEDIUM (5)
In JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.
Published: 2022-12-22T10:25:44.810Z
Updated: 2025-04-15T13:42:02.311Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-47895 |
vulnerable | 2026-06-03 14:48:27.863714 |
Details available
MEDIUM (4.7)
In JetBrains IntelliJ IDEA before 2022.3.1 the "Validate JSP File" action used the HTTP protocol to download required JAR files.
Published: 2022-12-22T10:25:41.948Z
Updated: 2025-04-15T14:31:57.709Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46828 |
vulnerable | 2026-06-03 14:48:26.557968 |
Details available
MEDIUM (5.2)
In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.
Published: 2022-12-08T17:37:59.846Z
Updated: 2025-04-22T18:33:56.630Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46827 |
vulnerable | 2026-06-03 14:48:26.557647 |
Details available
LOW (3.9)
In JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible.
Published: 2022-12-08T17:37:58.458Z
Updated: 2025-04-22T18:07:59.925Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46826 |
vulnerable | 2026-06-03 14:48:26.557336 |
Details available
MEDIUM (6.2)
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability.
Published: 2022-12-08T17:37:56.568Z
Updated: 2025-04-23T14:23:02.640Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46825 |
vulnerable | 2026-06-03 14:48:26.556994 |
Details available
MEDIUM (4)
In JetBrains IntelliJ IDEA before 2022.3 the built-in web server leaked information about open projects.
Published: 2022-12-08T17:37:54.716Z
Updated: 2025-04-23T14:23:30.467Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46824 |
vulnerable | 2026-06-03 14:48:26.556574 |
Details available
MEDIUM (5.6)
In JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible.
Published: 2022-12-08T17:37:52.175Z
Updated: 2025-04-23T14:23:49.885Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40978 |
vulnerable | 2026-06-03 14:48:03.876825 |
Details available
HIGH (7.5)
The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking
Published: 2022-09-19T16:05:08.000Z
Updated: 2024-08-03T12:28:42.951Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37010 |
vulnerable | 2026-06-03 14:47:41.252934 |
Details available
LOW (3.6)
In JetBrains IntelliJ IDEA before 2022.2 email address validation in the "Git User Name Is Not Defined" dialog was missed
Published: 2022-07-28T10:25:16.000Z
Updated: 2024-08-03T10:21:32.474Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37009 |
vulnerable | 2026-06-03 14:47:41.252434 |
Details available
LOW (3.9)
In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible
Published: 2022-07-28T10:25:10.000Z
Updated: 2024-08-03T10:21:32.463Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29819 |
vulnerable | 2026-06-03 14:46:58.934377 |
Details available
MEDIUM (6.9)
In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible
Published: 2022-04-28T09:55:28.000Z
Updated: 2024-08-03T06:33:42.822Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29818 |
vulnerable | 2026-06-03 14:46:58.934048 |
Details available
LOW (3.9)
In JetBrains IntelliJ IDEA before 2022.1 origin checks in the internal web server were flawed
Published: 2022-04-28T09:55:27.000Z
Updated: 2024-08-03T06:33:42.652Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29817 |
vulnerable | 2026-06-03 14:46:58.933742 |
Details available
LOW (3.9)
In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible
Published: 2022-04-28T09:55:26.000Z
Updated: 2024-08-03T06:33:42.813Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29816 |
vulnerable | 2026-06-03 14:46:58.933429 |
Details available
LOW (2.8)
In JetBrains IntelliJ IDEA before 2022.1 HTML injection into IDE messages was possible
Published: 2022-04-28T09:55:24.000Z
Updated: 2024-08-03T06:33:42.690Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29815 |
vulnerable | 2026-06-03 14:46:58.933102 |
Details available
MEDIUM (6.9)
In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible
Published: 2022-04-28T09:55:23.000Z
Updated: 2024-08-03T06:33:42.657Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29814 |
vulnerable | 2026-06-03 14:46:58.932782 |
Details available
MEDIUM (6.9)
In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible
Published: 2022-04-28T09:55:21.000Z
Updated: 2024-08-03T06:33:42.902Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29813 |
vulnerable | 2026-06-03 14:46:58.932440 |
Details available
MEDIUM (6.9)
In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible
Published: 2022-04-28T09:55:20.000Z
Updated: 2024-08-03T06:33:42.799Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29812 |
vulnerable | 2026-06-03 14:46:58.932070 |
Details available
LOW (2.3)
In JetBrains IntelliJ IDEA before 2022.1 notification mechanisms about using Unicode directionality formatting characters were insufficient
Published: 2022-04-28T09:55:19.000Z
Updated: 2024-08-03T06:33:42.664Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28651 |
vulnerable | 2026-06-03 14:46:55.151733 |
Details available
HIGH (8.4)
In JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields
Published: 2022-04-05T17:55:21.000Z
Updated: 2024-08-03T05:56:16.316Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24346 |
vulnerable | 2026-06-03 14:46:29.848260 |
Details available
In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possible.
Published: 2022-02-25T14:36:04.000Z
Updated: 2024-08-03T04:07:02.429Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24345 |
vulnerable | 2026-06-03 14:46:29.847864 |
Details available
In JetBrains IntelliJ IDEA before 2021.2.4, local code execution (without permission from a user) upon opening a project was possible.
Published: 2022-02-25T14:36:00.000Z
Updated: 2024-08-03T04:07:02.532Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30504 |
vulnerable | 2026-06-03 14:44:30.886466 |
Details available
In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation.
Published: 2021-05-11T11:32:37.000Z
Updated: 2024-08-03T22:32:41.122Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30006 |
vulnerable | 2026-06-03 14:44:27.248999 |
Details available
In IntelliJ IDEA before 2020.3.3, XXE was possible, leading to information disclosure.
Published: 2021-05-11T11:24:23.000Z
Updated: 2024-08-03T22:24:59.628Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29263 |
vulnerable | 2026-06-03 14:44:19.853351 |
Details available
In JetBrains IntelliJ IDEA 2020.3.3, local code execution was possible because of insufficient checks when getting the project from VCS.
Published: 2021-05-11T11:30:48.000Z
Updated: 2024-08-03T22:02:51.310Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25758 |
vulnerable | 2026-06-03 14:44:05.827935 |
Details available
In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution.
Published: 2021-02-03T15:16:13.000Z
Updated: 2024-08-03T20:11:27.862Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25756 |
vulnerable | 2026-06-03 14:44:05.826264 |
Details available
In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS.
Published: 2021-02-03T15:14:55.000Z
Updated: 2024-08-03T20:11:28.080Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7914 |
vulnerable | 2026-06-03 14:43:07.719948 |
Details available
In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3.
Published: 2020-01-31T12:02:40.000Z
Updated: 2024-08-04T09:48:23.897Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7905 |
vulnerable | 2026-06-03 14:43:07.710834 |
Details available
Ports listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network.
Published: 2020-01-30T17:03:36.000Z
Updated: 2024-08-04T09:48:23.515Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-7904 |
vulnerable | 2026-06-03 14:43:07.710467 |
Details available
In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS.
Published: 2020-01-30T17:01:39.000Z
Updated: 2024-08-04T09:48:23.727Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27622 |
vulnerable | 2026-06-03 14:42:18.238836 |
Details available
In JetBrains IntelliJ IDEA before 2020.2, the built-in web server could expose information about the IDE version.
Published: 2020-11-16T15:11:25.000Z
Updated: 2024-08-04T16:18:44.665Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11690 |
vulnerable | 2026-06-03 14:41:26.503395 |
Details available
In JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted host in some cases.
Published: 2020-04-22T13:52:39.000Z
Updated: 2024-08-04T11:35:13.899Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9873 |
vulnerable | 2026-06-03 14:40:49.942057 |
Details available
In several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2019.1, 2018.3.5, 2018.2.8, and 2018.1.8.
Published: 2019-07-03T18:43:42.000Z
Updated: 2024-08-04T22:01:54.981Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9872 |
vulnerable | 2026-06-03 14:40:49.941743 |
Details available
In several versions of JetBrains IntelliJ IDEA Ultimate, creating run configurations for cloud application servers leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. If the Settings Repository plugin was then used and configured to synchronize IDE settings using a public repository, these credentials were published to this repository. The issue has been fixed in the following versions: 2019.1, 2018.3.5, 2018.2.8, and 2018.1.8.
Published: 2019-07-03T18:40:17.000Z
Updated: 2024-08-04T22:01:55.184Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9823 |
vulnerable | 2026-06-03 14:40:49.859399 |
Details available
In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to saving a cleartext record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2018.3.5, 2018.2.8, 2018.1.8.
Published: 2019-07-03T18:11:48.000Z
Updated: 2024-08-04T22:01:54.946Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9186 |
vulnerable | 2026-06-03 14:40:48.817425 |
Details available
In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server listens on all interfaces (instead of listening on only the localhost interface). This issue has been fixed in the following versions: 2019.1, 2018.3.4, 2018.2.8, 2018.1.8, and 2017.3.7.
Published: 2019-07-03T18:35:06.000Z
Updated: 2024-08-04T21:38:46.632Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18361 |
vulnerable | 2026-06-03 14:39:57.219135 |
Details available
JetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution.
Published: 2019-10-31T14:37:38.000Z
Updated: 2024-08-05T01:54:14.486Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14954 |
vulnerable | 2026-06-03 14:39:46.885979 |
Details available
JetBrains IntelliJ IDEA before 2019.2 was resolving the markdown plantuml artifact download link via a cleartext http connection.
Published: 2019-10-01T13:22:24.000Z
Updated: 2024-08-05T00:34:52.712Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10104 |
vulnerable | 2026-06-03 14:39:21.441304 |
Details available
In several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration (for Tomcat, Jetty, Resin, or CloudBees) with the default setting allowed a remote attacker to execute code when the configuration is running, because a JMX server listened on all interfaces instead of localhost only. The issue has been fixed in the following versions: 2018.3.4, 2018.2.8, 2018.1.8, and 2017.3.7.
Published: 2019-07-03T18:52:13.000Z
Updated: 2024-08-04T22:10:09.962Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-8316 |
vulnerable | 2026-06-03 14:37:39.850098 |
Details available
IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicious code on both Androidmanifest.xml.
Published: 2018-08-03T15:00:00.000Z
Updated: 2024-09-16T18:23:33.553Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.