Skip to content

Known vulnerabilities in Apache Software Foundation Apache Portals

Is your version affected?

CVE Summary Score Published
CVE-2022-32533 Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues including… Not rated Jul 6, 2022
CVE-2021-36739 The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable… Not rated Jan 6, 2022
CVE-2021-36738 The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site… Not rated Jan 6, 2022
CVE-2021-36737 The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting (XSS) attacks Not rated Jan 6, 2022

Other Apache Software Foundation products