Approved changes feed: RSS · Atom

cpe:2.3:a:apache:jackrabbit:1.4:*:*:*:*:*:*:*

part: a version: 1.4 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductJackrabbit (d074302b-def9-53be-ad1c-85aeb2e48a5c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/jackrabbit purl2cpe 2026-06-01 10:14:25.827975
pkg:deb/debian/jackrabbit purl2cpe 2026-06-01 10:14:25.827976
pkg:deb/ubuntu/jackrabbit purl2cpe 2026-06-01 10:14:25.827977
pkg:github/apache/jackrabbit purl2cpe 2026-06-01 10:14:25.827979
pkg:maven/org.apache.jackrabbit/jackrabbit purl2cpe 2026-06-01 10:14:25.827980
pkg:maven/org.apache.jackrabbit/jackrabbit-core purl2cpe 2026-06-01 10:14:25.827982

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0026 vulnerable 2026-06-08 04:51:07.015346 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to (1) search.jsp or (2) swr.jsp.
Published: 2009-01-21T20:00:00.000Z
Updated: 2024-08-07T04:17:10.473Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.