Known Vulnerabilities for products from Jolokia
Listed below are 4 of the newest known vulnerabilities associated with the vendor "Jolokia".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-49157 json | Not Provided | 2026-06-01 | 2026-06-01 | |
| CVE-2026-45505 json | Not Provided | 2026-06-01 | 2026-06-02 | |
| CVE-2026-42588 json | Not Provided | 2026-06-01 | 2026-06-02 | |
| CVE-2026-40466 json | Not Provided | 2026-04-24 | 2026-07-15 | |
| CVE-2026-34197 json | Not Provided | 2026-04-07 | 2026-07-15 | |
| CVE-2018-1000130 json | A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run a... | 8.1 - HIGH | 2018-03-14 | 2019-03-08 |
| CVE-2018-1000129 json | An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicio... | 6.1 - MEDIUM | 2018-03-14 | 2019-03-07 |
| CVE-2018-10899 json | A flaw was found in Jolokia versions from 1.2 to before 1.6.1. Affected versions are vulnerable to a system-wide CSRF. This h... | 8.8 - HIGH | 2019-08-01 | 2023-11-07 |
| CVE-2014-0168 json | Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication ... | Not Provided | 2014-10-06 | 2026-05-06 |
Known software with vulnerabilities from Jolokia
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Jolokia | Jolokia | 0.80 |
| Application | Jolokia | Webarchive Agent | 0.80 |