Search for packages
| purl | pkg:maven/commons-beanutils/commons-beanutils@1.9.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2014-0114
|
Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through … |
Vulnerable |
|
CVE-2019-10086
|
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to … |
Vulnerable |
|
GHSA-p66x-2cv9-qq3v
Aliases: CVE-2014-0114 |
Arbitrary code execution in Apache Commons BeanUtils Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 … |
Vulnerable |
|
GHSA-6phf-73q6-gh87
Aliases: CVE-2019-10086 |
Insecure Deserialization in Apache Commons Beanutils In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing … |
Vulnerable |
|
CVE-2014-0114
|
Class Loader manipulation via request parameters This package does not suppress the class property, which allows remote attackers to "manipulate" … |
Vulnerable Vulnerable |
|
GHSA-wxr5-93ph-8wr9
Aliases: CVE-2025-48734 |
Apache Commons Improper Access Control vulnerability Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in … |
Not vulnerable Not vulnerable |