Apache Isis vulnerabilities

2 CVEs affecting Apache Isis, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-42467, published 2022-10-19.

More from Apache.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-42467, published 2022-10-19. Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days. When running in prototype mode, the h2 webconsole module (accessible from the Prototype menu) is automatically made available with the ability to directly query the database. It was felt that it is…
• CVE-2022-42466, published 2022-10-19. Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days. Prior to 2.0.0-M9, it was possible for an end-user to set the value of an editable string property of a domain object to a value that would be rendered unchanged when the value was saved. In…