Java (Maven) vulnerabilities
7,075 vulnerabilities and 2 malicious packages in Java (Maven). org.jenkins-ci.main:jenkins-core has the most reviewed advisories.
Most exploited Java (Maven) vulnerabilities
- CVE-2025-24813 Apache Tomcat Path Equivalence
- CVE-2023-46604 Apache ActiveMQ Deserialization of Untrusted Data
- CVE-2022-24816 OSGeo GeoServer JAI-EXT Code Injection
- CVE-2022-22947 VMware Spring Cloud Gateway Code Injection
- CVE-2021-44228 Apache Log4j2 Remote Code Execution
- CVE-2019-1003029 Jenkins Script Security Plugin Sandbox Bypass
- CVE-2019-1003030 Jenkins Matrix Project Plugin Remote Code Execution
- CVE-2025-24893 XWiki Platform Eval Injection
- CVE-2024-36401 OSGeo GeoServer GeoTools Eval Injection
- CVE-2024-27348 Apache HugeGraph-Server Improper Access Control
- CVE-2024-23897 Jenkins Command Line Interface (CLI) Path Traversal
- CVE-2023-33246 Apache RocketMQ Command Execution
Java (Maven) packages with the most advisories
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.