Approved changes feed: RSS · Atom
cpe:2.3:a:jolokia:jolokia:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Jolokia (46c49ec1-ee0e-582b-bb2d-24b1294d38d4) |
|---|---|
| Product | Jolokia (7f9c8393-b670-5b52-bf5d-8ce4b3b52f40) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/rhuss/jolokia |
purl2cpe | 2026-06-01 10:15:12.407788 |
pkg:gitlab/redhat/jolokia-jvm-agent |
purl2cpe | 2026-06-01 10:15:12.407790 |
pkg:maven/org.jolokia/jolokia |
purl2cpe | 2026-06-01 10:15:12.407793 |
pkg:rpm/fedora/jolokia-jvm-agent |
purl2cpe | 2026-06-01 10:15:12.407796 |
pkg:rpm/opensuse/jolokia |
purl2cpe | 2026-06-01 10:15:12.407799 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-10899 |
vulnerable | 2026-06-08 05:10:37.326248 |
Details available
HIGH (8.1)
A flaw was found in Jolokia versions from 1.2 to before 1.6.1. Affected versions are vulnerable to a system-wide CSRF. This holds true for properly configured instances with strict checking for origin and referrer headers. This could result in a Remote Code Execution attack.
Published: 2019-08-01T13:27:13.000Z
Updated: 2024-08-05T07:54:35.783Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0168 |
vulnerable | 2026-06-08 05:05:11.997113 |
Details available
Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.
Published: 2014-10-06T14:00:00.000Z
Updated: 2024-08-06T09:05:38.929Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.