maven package report

Is org.apache.portals.jetspeed-2:jetspeed safe?

3 known vulnerabilities, worst severity HIGH.

cvss

7.5

how bad it is if exploited, out of 10

epss

59.4%

chance of exploitation in the next 30 days

xyz score

5.7

CyberXYZ composite, and a working exploit is published

fig. 01 — GHSA-88f6-79x2-xqf3, the advisory selected below

// advisories

GHSA-88f6-79x2-xqf3

HIGHCVE-2016-0710

Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitrary SQL commands via the (1) role or (2) user parameter to services/usermanager/users/.

Affected: < 2.3.1
Fixed in: 2.3.1
Weakness: CWE-89
Published: 2022-05-17
Source: github

GHSA NVD MITRE reference reference reference reference reference reference reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so maven packages are not covered.

Checked 2026-09-22 at 02:38 UTC. The most recent advisory here was published 2022-05-17. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is org.apache.portals.jetspeed-2:jetspeed safe? maven package security report | CyberXYZ