Approved changes feed: RSS · Atom

cpe:2.3:a:jasypt_project:jasypt:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJasypt Project (a2d53c2d-2e4b-5349-9477-607037910ad3)
ProductJasypt (3d787097-9d0b-5885-b475-1ecc14c1e83f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/jasypt purl2cpe 2026-06-01 10:12:18.302692
pkg:deb/ubuntu/jasypt purl2cpe 2026-06-01 10:12:18.302695
pkg:github/jasypt/jasypt purl2cpe 2026-06-01 10:12:18.302698
pkg:maven/org.jasypt/jasypt purl2cpe 2026-06-01 10:12:18.302701
pkg:sourceforge/jasypt purl2cpe 2026-06-01 10:12:18.302704

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-9970 vulnerable 2026-06-08 05:06:13.202742 Details available
jasypt before 1.9.2 allows a timing attack against the password hash comparison.
Published: 2017-05-21T18:00:00.000Z
Updated: 2024-08-06T14:02:37.618Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.