Network Security Services For Java

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:dogtagpki:network_security_services_for_java:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDogtagpki (da8eaafd-448e-5d72-b709-87d41f967505)
ProductNetwork Security Services For Java (4d7a3935-f5dd-5071-b822-97dd8a272694)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/jss purl2cpe 2026-06-01 10:14:33.463448
pkg:deb/ubuntu/jss purl2cpe 2026-06-01 10:14:33.463450
pkg:github/dogtagpki/jss purl2cpe 2026-06-01 10:14:33.463453
pkg:rpm/centos/jss purl2cpe 2026-06-01 10:14:33.463456
pkg:rpm/fedora/jss purl2cpe 2026-06-01 10:14:33.463459
pkg:rpm/opensuse/jss purl2cpe 2026-06-01 10:14:33.463462

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4132 vulnerable 2026-06-08 05:51:36.837835 Memory leak on tls connections
MEDIUM (5.9)
A flaw was found in JSS. A memory leak in JSS requires non-standard configuration but is a low-effort DoS vector if configured that way (repeatedly hitting the login page).
Published: 2023-10-04T11:26:11.191Z
Updated: 2024-09-19T14:41:40.138Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4213 vulnerable 2026-06-08 05:38:08.943650 Details available
A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted memory builds up in the server memory, saturating the server’s RAM. This flaw allows an attacker to force the invocation of an out-of-memory process, causing a denial of service.
Published: 2022-08-24T15:07:48.000Z
Updated: 2024-08-03T17:16:04.486Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.