Maven org.apache.geronimo.plugins:console

Name: Maven org.apache.geronimo.plugins:console
Brand: Maven

productUS

pkg:maven/org.apache.geronimo.plugins/console

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

critical

by severity

0critical1high2medium0low

updated 2026-10-28

vulnerabilities (3)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2008-5518US	high9.4	35.9% (98th)	Exploit	2.1.4	2009-04-17	2.1.0 → 2.1.4
CVE-2009-0038US	medium4.3	18.0% (97th)	Exploit	2.1.4	2009-04-17	2.1.0 → 2.1.4
CVE-2009-0039US	medium6.8	11.1% (96th)	Exploit	2.1.4	2009-04-17	< 2.1.4

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.