Javamelody Project Javamelody

2 CVEs affecting Javamelody Project Javamelody. Latest disclosed: 2018-09-26. Critical: 1, High: 0.

Top CVEs affecting Javamelody Project Javamelody
CVESeverityScorePublishedSummary
CVE-2018-15531Critical9.82018-09-26JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.
CVE-2018-12432Medium6.12018-06-14JavaMelody through 1.60.0 has XSS via the counter parameter in a clear_counter action to the /monitoring URI.