JavaMelody vulnerabilities

CVEs whose affected-version data names the JavaMelody package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2016-20102Medium· 6.1

yesterday

JavaMelody < 1.60.0 Reflected XSS via monitoring graph parameter

JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph parameter of /monitoring?part=graph. Attackers can include a…

▾ SunlitJavaMelody · JavaMelodyvia CVEORG