Javamelody Project Javamelody
2 CVEs affecting Javamelody Project Javamelody. Latest disclosed: 2018-09-26. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-15531 | Critical | 9.8 | 2018-09-26 | JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java. |
CVE-2018-12432 | Medium | 6.1 | 2018-06-14 | JavaMelody through 1.60.0 has XSS via the counter parameter in a clear_counter action to the /monitoring URI. |