Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/commons-beanutils/commons-beanutils@1.9.3
purl pkg:maven/commons-beanutils/commons-beanutils@1.9.3
Next non-vulnerable version 1.11.0
Latest non-vulnerable version 1.11.0
Risk score 4.0
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
CVE-2014-0114

Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through …
1.9.4
Vulnerable
CVE-2019-10086

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to …
1.9.4
Vulnerable
GHSA-p66x-2cv9-qq3v
Aliases:
CVE-2014-0114
Arbitrary code execution in Apache Commons BeanUtils Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 …
1.9.4
Vulnerable
GHSA-6phf-73q6-gh87
Aliases:
CVE-2019-10086
Insecure Deserialization in Apache Commons Beanutils In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing …
1.9.4
Vulnerable
GHSA-wxr5-93ph-8wr9
Aliases:
CVE-2025-48734
Apache Commons Improper Access Control vulnerability Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in …
1.11.0
Not vulnerable
1.11.0
Not vulnerable
This package is not known to fix any advisories.