CVE-2014-9970
1 advisory.
Maven/org.jasypt:jasypt CVE-2014-9970: high 7.5, EPSS 2.37%
Exposure of Sensitive Information to an Unauthorized Actor in Apache Jasypt
Action: Upgrade org.jasypt:jasypt to 1.9.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.9.2 | - |
Fixed versions
| 1.9.2 |
Sources
- osv: GHSA-r5c2-rxh2-f5h2
- https://nvd.nist.gov/vuln/detail/CVE-2014-9970
- https://access.redhat.com/errata/RHSA-2017:2546
- https://access.redhat.com/errata/RHSA-2017:2547
- https://access.redhat.com/errata/RHSA-2017:2808
- https://access.redhat.com/errata/RHSA-2017:2809
- https://access.redhat.com/errata/RHSA-2017:2810
- https://access.redhat.com/errata/RHSA-2017:2811
- https://access.redhat.com/errata/RHSA-2017:3141
- https://access.redhat.com/errata/RHSA-2018:0294
- https://sourceforge.net/p/jasypt/code/668
CVE-2014-9970 · published · modified · JSON