Skip to content

Vendor

org.apache.geronimo vulnerabilities

1 published CVE affecting org.apache.geronimo, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of org.apache.geronimo alerts

Products

Latest org.apache.geronimo CVEs

Newest publication first

  1. CVE-2011-5034 Apache Geronimo Hash Collisions Cause DoS

    Published
    HighCVSS 7.8 EPSS 80.6% Framework module Public exploit PoC

    Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. NOTE: this might ove...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.