Apache Tomee vulnerabilities

• apache software foundation santuario, apache cxf, santuario xml security for java +16 more +18 more Bypass of the secureValidation property CVE-2021-40690 Fix available 7.5 HighSeptember 19, 2021
• apache tomcat, tomee, debian linux +19 more +21 more Incorrect Transfer-Encoding handling with HTTP/1.0 CVE-2021-33037 Fix available EPSS 74.7% 5.3 MediumJuly 12, 2021
• apache cxf, tomee, oracle business intelligence +2 more +4 more Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter CVE-2021-30468 Fix available 7.5 HighJune 16, 2021
• apache tomee Remote code execution in Apache TomEE CVE-2020-13931 Fix available 9.8 CriticalDecember 17, 2020
• apache tomee Missing Authentication for Critical Function in Apache TomEE CVE-2020-11969 Fix available 9.8 CriticalJune 15, 2020
• apache tomcat, tomee, debian linux +13 more +15 more Potential HTTP request smuggling in Apache Tomcat CVE-2019-17569 Fix available 4.8 MediumFebruary 24, 2020
• apache tomee, bouncycastle bc-java, netapp active iq unified manager +18 more +20 more Out-of-Memory Error in Bouncy Castle Crypto CVE-2019-17359 Fix available 7.5 HighOctober 8, 2019
• softwareag quartz, apache tomee, atlassian jira service management +28 more +30 more XML external entity injection in Terracotta Quartz Scheduler CVE-2019-13990 Public exploitFix available EPSS 16.6% 9.8 CriticalJuly 26, 2019
• apache tomee Apache TomEE console vulnerable to Cross-site Scripting CVE-2018-8031 Fix available 6.1 MediumJuly 23, 2018
• apache tomee The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote... CVE-2016-0779 9.8 CriticalApril 11, 2017