Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-32200

There is insufficient restrictions of called script functions in Apache Jena versions 4.8.0 and earlier. It allows a remote user to execute javascript via a SPARQL query. This issue affects Apache Jena: from 3.7.0 through 4.8.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.5%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2023-32200
  • Apache » Jena » Version: 3.10.0
    cpe:2.3:a:apache:jena:3.10.0
  • Apache » Jena » Version: 3.11.0
    cpe:2.3:a:apache:jena:3.11.0
  • Apache » Jena » Version: 3.12.0
    cpe:2.3:a:apache:jena:3.12.0
  • Apache » Jena » Version: 3.13.0
    cpe:2.3:a:apache:jena:3.13.0
  • Apache » Jena » Version: 3.13.1
    cpe:2.3:a:apache:jena:3.13.1
  • Apache » Jena » Version: 3.14.0
    cpe:2.3:a:apache:jena:3.14.0
  • Apache » Jena » Version: 3.15.0
    cpe:2.3:a:apache:jena:3.15.0
  • Apache » Jena » Version: 3.16.0
    cpe:2.3:a:apache:jena:3.16.0
  • Apache » Jena » Version: 3.17.0
    cpe:2.3:a:apache:jena:3.17.0
  • Apache » Jena » Version: 3.7.0
    cpe:2.3:a:apache:jena:3.7.0
  • Apache » Jena » Version: 3.8.0
    cpe:2.3:a:apache:jena:3.8.0
  • Apache » Jena » Version: 3.9.0
    cpe:2.3:a:apache:jena:3.9.0
  • Apache » Jena » Version: 4.0.0
    cpe:2.3:a:apache:jena:4.0.0
  • Apache » Jena » Version: 4.1.0
    cpe:2.3:a:apache:jena:4.1.0
  • Apache » Jena » Version: 4.2.0
    cpe:2.3:a:apache:jena:4.2.0
  • Apache » Jena » Version: 4.4.0
    cpe:2.3:a:apache:jena:4.4.0
  • Apache » Jena » Version: 4.7.0
    cpe:2.3:a:apache:jena:4.7.0
  • Apache » Jena » Version: 4.8.0
    cpe:2.3:a:apache:jena:4.8.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved