Skip to content

Product

org.apache.felix/org.apache.felix.webconsole vulnerabilities

1 published CVE affecting org.apache.felix/org.apache.felix.webconsole, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest org.apache.felix/org.apache.felix.webconsole CVEs

Newest publication first

  1. CVE-2025-25247 Apache Felix Webconsole: XSS in services console

    Published
    MediumCVSS 6.1 EPSS 0.69%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Felix Webconsole. This issue affects Apache Felix Webconsole 4.x up to 4.9.8 and 5.x up to 5.0.8. Users are recommended to upgrade to version 4.9.10 or 5.0.10 or higher, w...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.