Apache

Geronimo

10 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
10

CVE-2013-1777

  • EPSS 4.82%
  • Veröffentlicht 11.07.2013 22:55:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0.0.3 and other products, does not properly implement the RMI classloader, which allows remote attackers to exec...

7.8

CVE-2011-5034

  • EPSS 66.46%
  • Veröffentlicht 30.12.2011 01:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted pa...

9.4

CVE-2008-5518

Exploit
  • EPSS 15.78%
  • Veröffentlicht 17.04.2009 14:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload files to arbitrary directories via directory traversal sequences in the...

4.3

CVE-2009-0038

Exploit
  • EPSS 16.67%
  • Veröffentlicht 17.04.2009 14:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple cross-site scripting (XSS) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) ip, (3) username, or (4)...

6.8

CVE-2009-0039

Exploit
  • EPSS 4.51%
  • Veröffentlicht 17.04.2009 14:30:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 allow remote attackers to hijack the authentication of administrators for requests that (1) change th...

2.1

CVE-2008-0732

  • EPSS 0.05%
  • Veröffentlicht 12.02.2008 21:00:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

The init script for Apache Geronimo on SUSE Linux follows symlinks when performing a chown operation, which might allow local users to obtain access to unspecified files or directories.

7.5

CVE-2007-5797

  • EPSS 0.71%
  • Veröffentlicht 03.11.2007 00:46:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to bypass authentication via a login attempt with any username not contained in the database.

5

CVE-2007-5085

  • EPSS 0.66%
  • Veröffentlicht 26.09.2007 10:17:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in the management EJB (MEJB) in Apache Geronimo before 2.0.2 allows remote attackers to bypass authentication and obtain "access to Geronimo internals" via unspecified vectors.

10

CVE-2007-4548

  • EPSS 0.75%
  • Veröffentlicht 27.08.2007 23:17:00
  • Zuletzt bearbeitet 09.04.2025 00:30:58

The login method in LoginModule implementations in Apache Geronimo 2.0 does not throw FailedLoginException for failed logins, which allows remote attackers to bypass authentication requirements, deploy arbitrary modules, and gain administrative acces...

4.3

CVE-2006-0254

Exploit
  • EPSS 45.32%
  • Veröffentlicht 18.01.2006 01:51:00
  • Zuletzt bearbeitet 03.04.2025 01:03:51

Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is vi...