Product

org.apache.commons/commons-beanutils2 vulnerabilities

1 published CVE affecting org.apache.commons/commons-beanutils2, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.apache.commons/commons-beanutils2 CVEs

Newest publication first

CVE-2025-48734 Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default
Published 2025-05-28

HighCVSS 8.8 EPSS 2.0%

Improper Access Control vulnerability in Apache Commons. A special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this protection was not e...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.apache.commons/commons-beanutils2 vulnerabilities

Latest org.apache.commons/commons-beanutils2 CVEs

CVE-2025-48734 Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default