← Back

Jolokia

jolokia

4 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Jolokia
jolokia
3 CVEs
Webarchive Agent
webarchive_agent
1 CVE

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-10899
2Jolokia
Redhat
2Jolokia
Openstack
Nov 21, 2024
Aug 1, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A flaw was found in Jolokia versions from 1.2 to before 1.6.1. Affected versions are vulnerable to a system-wide CSRF. This holds true for properly configured instances with strict checking for origin and referrer header...Show more
A flaw was found in Jolokia versions from 1.2 to before 1.6.1. Affected versions are vulnerable to a system-wide CSRF. This holds true for properly configured instances with strict checking for origin and referrer headers. This could result in a Remote Code Execution attack.Show less
CVE-2018-1000130
1Jolokia
1Webarchive Agent
Nov 21, 2024
Mar 14, 2018
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server.
CVE-2018-1000129
1Jolokia
1Jolokia
Nov 21, 2024
Mar 14, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.
CVE-2014-0168
1Jolokia
1Jolokia
May 6, 2026
Oct 6, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.