Karaf
Apache · 12 CVEs
Apache Karaf: JDBC JAAS LDAP injection
Dec 21, 2022
Path traversal flaws
Jan 26, 2022
Insecure Java Deserialization in Apache Karaf
Jan 26, 2022
bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible
Dec 18, 2020
karaf: A remote client could create MBeans from arbitrary URLs
Jun 12, 2020
Apache Karaf Config service provides a install method (via service or MBean) that could be used to travel in any direct…
May 9, 2019
karaf: Zip-slip vulnerability via kar file
Mar 20, 2019
karaf: XML external entity processing
Jan 7, 2019
karaf: Authentication bypass access to Gogo shell in the webconsole
Sep 18, 2018
karaf: SSH RBAC security enforcement
Sep 18, 2018
Karaf JMX Console RCE during deserialization
Aug 1, 2018
karaf: LDAP injection in LDAPLoginModule
Feb 19, 2018
Karaf: denial of service via shutdown port
Nov 15, 2017
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2022-40145 | Apache Karaf: JDBC JAAS LDAP injection | CRITICAL | 2.50% | Dec 21, 2022 |
| CVE-2022-22932 | Path traversal flaws | MEDIUM | 2.75% | Jan 26, 2022 |
| CVE-2021-41766 | Insecure Java Deserialization in Apache Karaf | HIGH | 2.03% | Jan 26, 2022 |
| CVE-2020-28052 | bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible | HIGH | 7.22% | Dec 18, 2020 |
| CVE-2020-11980 | karaf: A remote client could create MBeans from arbitrary URLs | HIGH | 1.88% | Jun 12, 2020 |
| CVE-2019-0226 | Apache Karaf Config service provides a install method (via service or MBean) that could be used to travel in any directory and overwrite existing file. The vul… | MEDIUM | 1.80% | May 9, 2019 |
| CVE-2019-0191 | karaf: Zip-slip vulnerability via kar file | MEDIUM | 4.86% | Mar 20, 2019 |
| CVE-2018-11788 | karaf: XML external entity processing | CRITICAL | 7.35% | Jan 7, 2019 |
| CVE-2018-11787 | karaf: Authentication bypass access to Gogo shell in the webconsole | CRITICAL | 2.57% | Sep 18, 2018 |
| CVE-2018-11786 | karaf: SSH RBAC security enforcement | HIGH | 1.90% | Sep 18, 2018 |
| CVE-2016-8648 | Karaf JMX Console RCE during deserialization | HIGH | 1.98% | Aug 1, 2018 |
| CVE-2016-8750 | karaf: LDAP injection in LDAPLoginModule | HIGH | 5.18% | Feb 19, 2018 |
| CVE-2014-0219 | Karaf: denial of service via shutdown port | MEDIUM | 0.70% | Nov 15, 2017 |
Showing 1 to 12 of 12 CVEs