CVE-2016-0779

概要

参考情報

• packetstormsecurity.com/files/136256/Apache-TomEE-Patched.html · Third Party Advisory
• tomee-openejb.979440.n4.nabble.com/Document-resolved-vulnerability-CVE-2015-8581-td4678073.html · Issue Tracking
• tomee.apache.org/security/tomee.html · Patch
• securityfocus.com/archive/1/537806/100/0/threaded
• securityfocus.com/bid/79204 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-15-638 · Third Party Advisory

tomee のその他の脆弱性

• CVE-2021-40690高 7.5All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" pr…
• CVE-2021-33037中 5.3Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header …
• CVE-2021-30468高 7.5A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results i…
• CVE-2020-13931緊急 9.8If Apache TomEE 8.0.0-M1 - 8.0.3, 7.1.0 - 7.1.3, 7.0.0-M1 - 7.0.8, 1.0.0 - 1.7.5 is configured to use the embedded ActiveMQ broker, and the …
• CVE-2020-11969緊急 9.8If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is open…