Apache Cayenne vulnerabilities

2 CVEs affecting Apache Cayenne, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-24289, published 2022-02-11.

More from Apache.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-11758, published 2018-08-22. High severity, CVSS 8.1. EPSS: 3% chance of exploitation in the next 30 days. This affects Apache Cayenne 4.1.M1, 3.2.M1, 4.0.M2 to 4.0.M5, 4.0.B1, 4.0.B2, 4.0.RC1, 3.1, 3.1.1, 3.1.2. CayenneModeler is a desktop GUI tool shipped with Apache Cayenne and intended for editing…
• CVE-2022-24289, published 2022-02-11. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. Hessian serialization is a network protocol that supports object-based transmission. Apache Cayenne's optional Remote Object Persistence (ROP) feature is a web services-based technology that provides…