Approved changes feed: RSS · Atom

cpe:2.3:a:apache:geronimo:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductGeronimo (c9684310-70da-51ab-a5fc-96be416ae41b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/geronimo purl2cpe 2026-06-01 10:14:26.625171
pkg:cpan/geronimo purl2cpe 2026-06-01 10:14:26.625172
pkg:deb/debian/geronimo-concurrent-1.0-spec purl2cpe 2026-06-01 10:14:26.625173
pkg:deb/ubuntu/geronimo-concurrent-1.0-spec purl2cpe 2026-06-01 10:14:26.625175
pkg:github/apache/geronimo purl2cpe 2026-06-01 10:14:26.625176
pkg:maven/geronimo/geronimo purl2cpe 2026-06-01 10:14:26.625177
pkg:maven/geronimo/geronimo-core purl2cpe 2026-06-01 10:14:26.625179
pkg:maven/org.apache.geronimo/geronimo purl2cpe 2026-06-01 10:14:26.625180

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-5034 vulnerable 2026-06-08 04:59:34.254566 Details available
Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. NOTE: this might overlap CVE-2011-4461.
Published: 2011-12-30T01:00:00.000Z
Updated: 2024-08-07T00:23:39.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0254 vulnerable 2026-06-08 04:48:53.208254 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.