Search for packages
| purl | pkg:maven/org.apache.tomee/tomee@1.7.5 |
| Tags | Ghost |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-5vbc-strc-5ue5
Aliases: CVE-2020-11969 GHSA-836g-5fr5-fgcr |
Missing Authentication for Critical Function If Apache TomEE is configured to use the embedded ActiveMQ broker, and the broker URI includes the useJMX=true parameter, a JMX port is opened on TCP port 1099, which does not include authentication. This affects Apache TomEE 8.0.0-M1 - 8.0.1, Apache TomEE 7.1.0 - 7.1.2, Apache TomEE 7.0.0-M1 - 7.0.7, Apache TomEE 1.0.0 - 1.7.5. |
Affected by 0 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. Affected by 2 other vulnerabilities. |
|
VCID-dr52-xewb-k7hv
Aliases: CVE-2020-13931 GHSA-mp28-rq7g-qx62 |
Remote code execution in Apache TomEE If Apache TomEE - - - - is configured to use the embedded ActiveMQ broker, and the broker config is misconfigured, a JMX port is opened on TCP port, which does not include authentication. CVE-2020-11969 previously addressed the creation of the JMX management interface, however the incomplete fix does not cover this edge case. |
Affected by 2 other vulnerabilities. Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-02T12:37:48.361349+00:00 | GitLab Importer | Affected by | VCID-dr52-xewb-k7hv | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomee/tomee/CVE-2020-13931.yml | 38.0.0 |
| 2026-04-01T15:59:52.414339+00:00 | GHSA Importer | Affected by | VCID-5vbc-strc-5ue5 | https://github.com/advisories/GHSA-836g-5fr5-fgcr | 38.0.0 |