Lookup for vulnerable packages by Package URL.

Purlpkg:maven/com.codenameone/codenameone-core@7.0.62
Typemaven
Namespacecom.codenameone
Namecodenameone-core
Version7.0.62
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version7.0.71
Latest_non_vulnerable_version7.0.71
Affected_by_vulnerabilities
0
url VCID-6wjy-rsfk-efgb
vulnerability_id VCID-6wjy-rsfk-efgb
summary
Use of Implicit Intent for Sensitive Communication
A vulnerability was found in CodenameOne 7.0.70. It has been classified as problematic. Affected is an unknown function. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version 7.0.71 is able to address this issue. The patch is identified as dad49c9ef26a598619fc48d2697151a02987d478. It is recommended to upgrade the affected component. VDB-220470 is the identifier assigned to this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-4903
reference_id
reference_type
scores
0
value 0.00422
scoring_system epss
scoring_elements 0.62426
published_at 2026-06-07T12:55:00Z
1
value 0.00422
scoring_system epss
scoring_elements 0.62425
published_at 2026-06-09T12:55:00Z
2
value 0.00422
scoring_system epss
scoring_elements 0.62427
published_at 2026-06-05T12:55:00Z
3
value 0.00422
scoring_system epss
scoring_elements 0.62381
published_at 2026-06-04T12:55:00Z
4
value 0.00422
scoring_system epss
scoring_elements 0.62436
published_at 2026-06-06T12:55:00Z
5
value 0.00422
scoring_system epss
scoring_elements 0.62411
published_at 2026-06-08T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-4903
1
reference_url https://github.com/codenameone/CodenameOne
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/codenameone/CodenameOne
2
reference_url https://github.com/codenameone/CodenameOne/commit/dad49c9ef26a598619fc48d2697151a02987d478
reference_id
reference_type
scores
0
value 5.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:P
1
value 5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
4
value CRITICAL
scoring_system generic_textual
scoring_elements
5
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-24T14:47:58Z/
url https://github.com/codenameone/CodenameOne/commit/dad49c9ef26a598619fc48d2697151a02987d478
3
reference_url https://github.com/codenameone/CodenameOne/issues/3583
reference_id
reference_type
scores
0
value 5.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:P
1
value 5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
4
value CRITICAL
scoring_system generic_textual
scoring_elements
5
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-24T14:47:58Z/
url https://github.com/codenameone/CodenameOne/issues/3583
4
reference_url https://github.com/codenameone/CodenameOne/releases/tag/7.0.71
reference_id
reference_type
scores
0
value 5.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:P
1
value 5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
4
value CRITICAL
scoring_system generic_textual
scoring_elements
5
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-24T14:47:58Z/
url https://github.com/codenameone/CodenameOne/releases/tag/7.0.71
5
reference_url https://vuldb.com/?ctiid.220470
reference_id
reference_type
scores
0
value 5.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:P
1
value 5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
4
value CRITICAL
scoring_system generic_textual
scoring_elements
5
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-24T14:47:58Z/
url https://vuldb.com/?ctiid.220470
6
reference_url https://vuldb.com/?id.220470
reference_id
reference_type
scores
0
value 5.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:P/I:P/A:P
1
value 5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
2
value 5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
3
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
4
value CRITICAL
scoring_system generic_textual
scoring_elements
5
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-24T14:47:58Z/
url https://vuldb.com/?id.220470
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-4903
reference_id CVE-2022-4903
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-4903
8
reference_url https://github.com/advisories/GHSA-p6xq-9h8r-v544
reference_id GHSA-p6xq-9h8r-v544
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-p6xq-9h8r-v544
fixed_packages
0
url pkg:maven/com.codenameone/codenameone-core@7.0.71
purl pkg:maven/com.codenameone/codenameone-core@7.0.71
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.codenameone/codenameone-core@7.0.71
aliases CVE-2022-4903, GHSA-p6xq-9h8r-v544
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6wjy-rsfk-efgb
Fixing_vulnerabilities
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/com.codenameone/codenameone-core@7.0.62