# Jetbrains Intellij Idea


- [CVE-2026-64812](https://insights.sbomify.com/CVE-2026-64812/): Missing authorization in IntelliJ IDEA (critical 10.0)
- [CVE-2026-64813](https://insights.sbomify.com/CVE-2026-64813/): Missing authorization in IntelliJ IDEA (critical 10.0)
- [CVE-2021-45977](https://insights.sbomify.com/CVE-2021-45977/): Misconfiguration in n/a (critical 9.8)
- [CVE-2020-11690](https://insights.sbomify.com/CVE-2020-11690/): Server-side request forgery in n/a (critical 9.8)
- [CVE-2019-10104](https://insights.sbomify.com/CVE-2019-10104/): Misconfiguration in n/a (critical 9.8)
- [CVE-2019-9186](https://insights.sbomify.com/CVE-2019-9186/): Misconfiguration in n/a (critical 9.8)
- [CVE-2019-9823](https://insights.sbomify.com/CVE-2019-9823/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2019-9873](https://insights.sbomify.com/CVE-2019-9873/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2026-59792](https://insights.sbomify.com/CVE-2026-59792/): Path traversal in IntelliJ IDEA (critical 9.6)
- [CVE-2024-37051](https://insights.sbomify.com/CVE-2024-37051/): Information disclosure in Aqua (critical 9.3)
- [CVE-2026-64814](https://insights.sbomify.com/CVE-2026-64814/): In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session (high 8.6)
- [CVE-2022-28651](https://insights.sbomify.com/CVE-2022-28651/): Information disclosure in IntelliJ IDEA (high 8.4)

---
From sbomify Insights: https://insights.sbomify.com/products/jetbrains/intellij-idea/