Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.portals.jetspeed-2:jetspeed

3 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
2.3.1 (May 4, 2016): no advisory affects it
Newest unaffected release
2.3.1 (May 4, 2016), the latest release
Advisories
3
Dependents
2
Releases
8 since 2.0 (Jul 27, 2006)
Registry
Maven Central
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 3

  • Cross-site scripting (XSS) vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to inject arbitrary web script or HTML…

    Affected: fixed in 2.3.1.

    Fixed in 2.3.1 (released May 4, 2016, 23 days after disclosure).

    The latest release, 2.3.1, is not affected.

  • Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute…

    Affected: fixed in 2.3.1.

    Fixed in 2.3.1 (released May 4, 2016, 23 days after disclosure).

    The latest release, 2.3.1, is not affected.

  • Directory traversal vulnerability in the Import/Export function in the Portal Site Manager in Apache Jetspeed before 2.3.1 allows remote…

    Affected: fixed in 2.3.1.

    Fixed in 2.3.1 (released May 4, 2016, 23 days after disclosure).

    The latest release, 2.3.1, is not affected.