← Back

Intellij Idea

intellij_idea

Vendor: Jetbrains • 63 CVEs

CVEs (63)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-9186
1Jetbrains
1Intellij Idea
Jun 17, 2026
Jul 3, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server listens on all interf...Show more
In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server listens on all interfaces (instead of listening on only the localhost interface). This issue has been fixed in the following versions: 2019.1, 2018.3.4, 2018.2.8, 2018.1.8, and 2017.3.7.Show less
CVE-2019-10104
1Jetbrains
1Intellij Idea
Jun 17, 2026
Jul 3, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
In several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration (for Tomcat, Jetty, Resin, or CloudBees) with the default setting allowed a remote attacker to execute code when the configura...Show more
In several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration (for Tomcat, Jetty, Resin, or CloudBees) with the default setting allowed a remote attacker to execute code when the configuration is running, because a JMX server listened on all interfaces instead of localhost only. The issue has been fixed in the following versions: 2018.3.4, 2018.2.8, 2018.1.8, and 2017.3.7.Show less
CVE-2017-8316
1Jetbrains
1Intellij Idea
Nov 21, 2024
Aug 3, 2018
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability by implementing malicious code on both Androidmanifest.xml.