Commons Beanutils (Apache) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 22 known versions, newest CVE from 2025-05-28. Vendor: Apache.

CVEs of Commons Beanutils

• CVE-2025-48734 - CVSS 8.8 (high), 2025-05-28: Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from…
• CVE-2019-10086 - CVSS 7.3 (high), 2019-08-20: In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader…
• CVE-2014-0114 - CVSS 7.5 (high), 2014-04-30: Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring…