Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apache mod jk 1.2.21 vulnerabilities and exploits

(subscribe to this query)
2.6
CVSSv2
CVE-2008-5519
The JK Connector (aka mod_jk) 1.2.0 up to and including 1.2.26 in Apache Tomcat allows remote malicious users to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic circumstances involving (1) a request from a different client that included...
Apache Mod Jk 1.2.11Apache Mod Jk 1.2.25Apache Mod Jk 1.2.9Apache Mod Jk 1.2.19Apache Mod Jk 1.2.23Apache Mod Jk 1.2.16Apache Mod Jk 1.2.6Apache Mod Jk 1.2.17Apache Mod Jk 1.2.24Apache Mod Jk 1.2.22Apache Mod Jk 1.2Apache Mod Jk 1.2.13Apache Mod Jk 1.2.8Apache Mod Jk 1.2.10Apache Mod Jk 1.2.7Apache Mod Jk 1.2.20Apache Mod Jk 1.2.21Apache Mod Jk 1.2.1Apache Mod Jk 1.2.15Apache Mod Jk 1.2.12Apache Mod Jk 1.2.14.1Apache Mod Jk 1.2.14
4.4
CVSSv2
CVE-2019-12418
When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI registry to perform a man-in-the-middle attack...
Apache TomcatDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Oracle Workload Manager 18cOracle Workload Manager 19cOracle Workload Manager 12.2.0.1Canonical Ubuntu Linux 16.04Opensuse Leap 15.1Netapp Oncommand System Manager
5.1
CVSSv2
CVE-2019-17563
When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session fixation attack. The window was considered too narrow for an exploit to be practical but, erring on the si...
Apache TomcatDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Leap 15.1Canonical Ubuntu Linux 16.04Oracle Transportation Management 6.3.7Oracle Retail Order Broker 15.0Oracle Micros Relate Crm Software 11.4Oracle Instantis EnterprisetrackOracle Hyperion Infrastructure Technology 11.1.2.4Oracle Agile Engineering Data Management 6.2.1.0Oracle Mysql Enterprise Monitor
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook