Apache Portals (Apache Software Foundation) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-07-06. Vendor: Apache Software Foundation.

CVEs of Apache Portals

• CVE-2022-32533 - CVSS 9.8 (critical), 2022-07-06: Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues including XSS, CSRF, XXE, and SSRF. Setting the…
• CVE-2021-36738 - CVSS 6.1 (medium), 2022-01-06: The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should…
• CVE-2021-36737 - CVSS 6.1 (medium), 2022-01-06: The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the…
• CVE-2021-36739 - CVSS 6.1 (medium), 2022-01-06: The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting (XSS) attacks.