Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 3.1.2
Report Generated On: May 12, 2019 at 08:06:47 +00:00
Dependencies Scanned: 404 (308 unique)
Vulnerable Dependencies: 43
Vulnerabilities Found: 764
Vulnerabilities Suppressed: 0
...
NVD CVE 2002: 09/05/2019 09:15:29
NVD CVE 2003: 11/05/2019 08:45:53
NVD CVE 2004: 10/05/2019 09:15:33
NVD CVE 2005: 10/05/2019 09:15:33
NVD CVE 2006: 11/05/2019 08:45:53
NVD CVE 2007: 11/05/2019 08:45:53
NVD CVE 2008: 11/05/2019 08:45:53
NVD CVE 2009: 11/05/2019 08:45:53
NVD CVE 2010: 11/05/2019 08:45:53
NVD CVE 2011: 11/05/2019 08:45:54
NVD CVE 2012: 11/05/2019 08:15:40
NVD CVE 2013: 11/05/2019 08:15:40
NVD CVE 2014: 11/05/2019 08:15:40
NVD CVE 2015: 11/05/2019 08:15:40
NVD CVE 2016: 11/05/2019 08:15:40
NVD CVE 2017: 11/05/2019 07:45:46
NVD CVE 2018: 11/05/2019 07:45:46
NVD CVE 2019: 12/05/2019 07:15:28
NVD CVE Checked: 12/05/2019 08:05:54
NVD CVE Modified: 12/05/2019 05:15:30
VersionCheckOn: 1555228280862

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	CPE	Coordinates	Highest Severity	CVE Count	CPE Confidence	Evidence Count
groovy-all-2.4.12.jar	cpe:/a:apache:groovy:2.4.12	org.codehaus.groovy:groovy-all:2.4.12 ✓		0	Low	36
juzu-core-1.2.x-SNAPSHOT.jar		org.juzu:juzu-core:1.2.x-SNAPSHOT		0		21
rhino-1.7R3.jar		org.mozilla:rhino:1.7R3 ✓		0		26
juzu-plugins-less-1.2.x-SNAPSHOT.jar		org.juzu:juzu-plugins-less:1.2.x-SNAPSHOT		0		25
juzu-plugins-portlet-1.2.x-SNAPSHOT.jar		org.juzu:juzu-plugins-portlet:1.2.x-SNAPSHOT		0		25
javax.inject-1.jar		javax.inject:javax.inject:1 ✓		0		20
portlet-api-2.0.jar		javax.portlet:portlet-api:2.0 ✓		0		22
commons-lang-2.6.jar		org.netbeans.external:org-apache-commons-lang:RELEASE90 ✓		0		34
jcr-1.0.1.jar	cpe:/a:content_project:content:1.0.1	javax.jcr:jcr:1.0.1	Medium	1	Low	25
exo.jcr.component.ext-5.3.x-SNAPSHOT.jar		org.exoplatform.jcr:exo.jcr.component.ext:5.3.x-SNAPSHOT		0		22
mime-util-2.1.3.jar		eu.medsea.mimeutil:mime-util:2.1.3 ✓		0		30
jakarta-regexp-1.4.jar		jakarta-regexp:jakarta-regexp:1.4 ✓		0		14
xpp3-1.1.6.jar		org.ogce:xpp3:1.1.6 ✓		0		24
jcl-over-slf4j-1.7.18.jar		org.slf4j:jcl-over-slf4j:1.7.18 ✓		0		31
slf4j-api-1.7.18.jar		org.slf4j:slf4j-api:1.7.18 ✓		0		31
exo.kernel.commons-5.3.x-SNAPSHOT.jar		org.exoplatform.kernel:exo.kernel.commons:5.3.x-SNAPSHOT		0		22
javax.servlet-api-3.0.1.jar		javax.servlet:javax.servlet-api:3.0.1 ✓		0		38
commons-beanutils-1.8.3.jar	cpe:/a:apache:commons_beanutils:1.8.3	commons-beanutils:commons-beanutils:1.8.3 ✓	High	1	Low	34
jibx-run-1.2.6.jar		org.jibx:jibx-run:1.2.6 ✓		0		29
cdi-api-1.0-SP4.jar		javax.enterprise:cdi-api:1.0-SP4 ✓		0		31
exo.kernel.container-5.3.x-SNAPSHOT.jar		org.exoplatform.kernel:exo.kernel.container:5.3.x-SNAPSHOT		0		22
exo.portal.webui.core-5.3.x-SNAPSHOT.jar	cpe:/a:in-portal:in-portal:5.3	org.exoplatform.gatein.portal:exo.portal.webui.core:5.3.x-SNAPSHOT		0	Low	27
exo.portal.component.resources-5.3.x-SNAPSHOT.jar	cpe:/a:in-portal:in-portal:5.3.20190510	org.exoplatform.gatein.portal:exo.portal.component.resources:5.3.x-SNAPSHOT		0	Low	31
staxnav.core-0.9.8.jar		org.staxnav:staxnav.core:0.9.8 ✓		0		19
closure-compiler-externs-v20170910.jar		com.google.javascript:closure-compiler-externs:v20170910 ✓		0		19
args4j-2.33.jar		args4j:args4j:2.33 ✓		0		24
error_prone_annotations-2.0.18.jar		com.google.errorprone:error_prone_annotations:2.0.18 ✓		0		23
gson-2.7.jar		com.google.code.gson:gson:2.7 ✓		0		35
jsinterop-annotations-1.0.0.jar		com.google.jsinterop:jsinterop-annotations:1.0.0 ✓		0		19
closure-compiler-v20170910.jar		com.google.javascript:closure-compiler:v20170910 ✓		0		13
twitter4j-core-3.0.5.jar	cpe:/a:twitter_project:twitter:3.0.5 cpe:/a:twitter:twitter:3.0.5	org.twitter4j:twitter4j-core:3.0.5 ✓		0	Low	22
scribe-1.3.5.jar	cpe:/a:scribe:scribe:1.3.5	org.scribe:scribe:1.3.5 ✓		0	Low	23
google-http-client-1.14.1-beta.jar		com.google.http-client:google-http-client:1.14.1-beta ✓		0		24
jsr305-1.3.9.jar		com.google.code.findbugs:jsr305:1.3.9 ✓		0		21
google-oauth-client-1.14.1-beta.jar		com.google.oauth-client:google-oauth-client:1.14.1-beta ✓		0		24
google-api-client-1.14.1-beta.jar		com.google.api-client:google-api-client:1.14.1-beta ✓		0		22
jackson-core-asl-1.9.11.jar	cpe:/a:fasterxml:jackson:1.9.11	org.codehaus.jackson:jackson-core-asl:1.9.11 ✓		0	Low	32
google-http-client-jackson-1.14.1-beta.jar		com.google.http-client:google-http-client-jackson:1.14.1-beta ✓		0		22
google-api-services-plus-v1-rev69-1.14.2-beta.jar		com.google.apis:google-api-services-plus:v1-rev69-1.14.2-beta ✓		0		26
google-api-services-oauth2-v2-rev36-1.14.2-beta.jar		com.google.apis:google-api-services-oauth2:v2-rev36-1.14.2-beta ✓		0		26
joda-time-2.4.jar		joda-time:joda-time:2.4 ✓		0		34
ehcache-core-2.6.9.jar		net.sf.ehcache:ehcache-core:2.6.9 ✓		0		19
juel-impl-2.2.7.jar		de.odysseus.juel:juel-impl:2.2.7 ✓		0		26
el-api-6.0.41.jar	cpe:/a:apache_tomcat:apache_tomcat:6.0.41 cpe:/a:apache:tomcat:6.0.41 cpe:/a:apache_software_foundation:tomcat:6.0.41	org.apache.tomcat:el-api:6.0.41 ✓	High	22	Highest	19
jasper-el-6.0.41.jar	cpe:/a:apache_tomcat:apache_tomcat:6.0.41 cpe:/a:apache:tomcat:6.0.41 cpe:/a:apache_software_foundation:tomcat:6.0.41 cpe:/a:jasper_project:jasper:6.0.41	org.apache.tomcat:jasper-el:6.0.41 ✓	High	22	Highest	21
shindig-common-2.5.2.jar	cpe:/a:apache:shindig:2.5.2	org.apache.shindig:shindig-common:2.5.2 ✓		0	Low	26
filters-2.0.235.jar	cpe:/a:image_processing_software:image_processing_software:2.0.235 cpe:/a:processing:processing:2.0.235	com.jhlabs:filters:2.0.235 ✓	Medium	2	Low	22
simplecaptcha-1.1.1.Final-gatein-4.jar		org.gatein.captcha:simplecaptcha:1.1.1.Final-gatein-4		0		27
gatein-api-1.0.1.Final.jar		org.gatein.api:gatein-api:1.0.1.Final ✓		0		29
commons-webui-component-5.3.x-SNAPSHOT.jar		org.exoplatform.commons:commons-webui-component:5.3.x-SNAPSHOT		0		24
commons-digester-2.1.jar		commons-digester:commons-digester:2.1 ✓		0		34
exo.kernel.component.command-5.3.x-SNAPSHOT.jar		org.exoplatform.kernel:exo.kernel.component.command:5.3.x-SNAPSHOT		0		22
exo.core.component.organization.api-5.3.x-SNAPSHOT.jar	cpe:/a:api-platform:core:5.3.20190510	org.exoplatform.core:exo.core.component.organization.api:5.3.x-SNAPSHOT		0	Low	24
fontbox-1.8.14.jar	cpe:/a:apache:pdfbox:1.8.14	org.apache.pdfbox:fontbox:1.8.14 ✓	Medium	2	Highest	37
jempbox-1.8.14.jar	cpe:/a:apache:pdfbox:1.8.14	org.apache.pdfbox:jempbox:1.8.14 ✓	Medium	2	Highest	35
pdfbox-1.8.14.jar	cpe:/a:apache:pdfbox:1.8.14	org.apache.pdfbox:pdfbox:1.8.14 ✓	Medium	2	Highest	35
htmllexer-2.1.jar		org.htmlparser:htmllexer:2.1 ✓		0		23
htmlparser-2.1.jar		org.htmlparser:htmlparser:2.1 ✓		0		23
poi-3.13.jar	cpe:/a:apache:poi:3.13	org.apache.poi:poi:3.13 ✓	High	2	Highest	28
tika-core-1.5.jar	cpe:/a:apache:tika:1.5	org.apache.tika:tika-core:1.5 ✓	High	8	Highest	33
vorbis-java-core-0.1-tests.jar		org.gagravarr:vorbis-java-core:0.1 ✓		0		23
vorbis-java-tika-0.1.jar	cpe:/a:apache:tika:0.1	org.gagravarr:vorbis-java-tika:0.1 ✓	High	6	Highest	23
netcdf-4.2-min.jar		edu.ucar:netcdf:4.2-min ✓		0		21
apache-mime4j-core-0.7.2.jar	cpe:/a:apache:james:0.7.2	org.apache.james:apache-mime4j-core:0.7.2 ✓		0	Low	33
xz-1.2.jar	cpe:/a:tukaani:xz:1.2	org.tukaani:xz:1.2 ✓	Medium	1	Low	27
commons-compress-1.5.jar	cpe:/a:apache:commons-compress:1.5	org.apache.commons:commons-compress:1.5 ✓		0	Low	39
tagsoup-1.2.1.jar		org.ccil.cowan.tagsoup:tagsoup:1.2.1 ✓		0		18
asm-debug-all-4.1.jar		org.ow2.asm:asm-debug-all:4.1 ✓		0		28
isoparser-1.0-RC-1.jar	cpe:/a:boxes_project:boxes:7.x-1.0	com.googlecode.mp4parser:isoparser:1.0-RC-1 ✓	Low	1	Highest	24
xmpcore-5.1.2.jar		com.adobe.xmp:xmpcore:5.1.2 ✓		0		30
metadata-extractor-2.6.2.jar		com.drewnoakes:metadata-extractor:2.6.2 ✓		0		21
vorbis-java-core-0.1.jar		org.gagravarr:vorbis-java-core:0.1 ✓		0		21
juniversalchardet-1.0.3.jar		org.zenframework.z8.dependencies.commons:juniversalchardet-1.0.3:2.0 ✓		0		26
jhighlight-1.0.jar		com.uwyn:jhighlight:1.0 ✓		0		25
xmlbeans-2.6.0.jar		org.apache.xmlbeans:xmlbeans:2.6.0 ✓		0		24
exo.core.component.document-5.3.x-SNAPSHOT.jar		org.exoplatform.core:exo.core.component.document:5.3.x-SNAPSHOT		0		22
exo.core.component.database-5.3.x-SNAPSHOT.jar		org.exoplatform.core:exo.core.component.database:5.3.x-SNAPSHOT		0		22
lucene-core-3.6.2.jar		org.apache.lucene:lucene-core:3.6.2 ✓		0		26
lucene-analyzers-3.6.2.jar		org.apache.lucene:lucene-analyzers:3.6.2 ✓		0		26
lucene-spellchecker-3.6.2.jar		org.apache.lucene:lucene-spellchecker:3.6.2 ✓		0		26
jta-1.1.jar		javax.transaction:transaction-api:1.1 ✓		0		22
concurrent-1.3.4.jar		concurrent:concurrent:1.3.4 ✓		0		23
commons-collections-3.2.2.jar	cpe:/a:apache:commons_collections:3.2.2	commons-collections:commons-collections:3.2.2 ✓		0	Low	40
jgroups-3.6.13.Final.jar		org.jgroups:jgroups:3.6.13.Final ✓		0		32
jbossjta-4.16.6.Final.jar		org.jboss.jbossts:jbossjta:4.16.6.Final ✓		0		22
ws-commons-util-1.0.1.jar	cpe:/a:ws_project:ws:1.0.1	ws-commons-util:ws-commons-util:1.0.1 ✓	Medium	1	Low	30
jboss-common-core-2.2.22.GA.jar		org.jboss:jboss-common-core:2.2.22.GA ✓		0		30
stringtemplate-3.2.1.jar		org.antlr:stringtemplate:3.2.1 ✓		0		23
antlr-runtime-3.5.jar		org.antlr:antlr-runtime:3.5 ✓		0		26
jboss-logging-3.3.0.Final.jar		org.jboss.logging:jboss-logging:3.3.0.Final ✓		0		44
exo.kernel.component.ext.cache.impl.infinispan.v8-5.3.x-SNAPSHOT.jar	cpe:/a:infinispan:infinispan:5.3.0	org.exoplatform.kernel:exo.kernel.component.ext.cache.impl.infinispan.v8:5.3.x-SNAPSHOT	Medium	3	Highest	24
jboss-marshalling-osgi-2.0.0.Beta3.jar		org.jboss.marshalling:jboss-marshalling-osgi:2.0.0.Beta3 ✓		0		29
infinispan-core-8.2.6.Final.jar	cpe:/a:infinispan:infinispan:8.2.6	org.infinispan:infinispan-core:8.2.6.Final ✓	Medium	3	Highest	35
exo.jcr.component.core-5.3.x-SNAPSHOT.jar		org.exoplatform.jcr:exo.jcr.component.core:5.3.x-SNAPSHOT		0		22
quartz-2.2.2.jar		org.quartz-scheduler:quartz:2.2.2 ✓		0		43
mail-1.4.7.jar	cpe:/a:sun:javamail:1.4.7	javax.mail:mail:1.4.7 ✓		0	Low	41
commons-dbcp-1.4.jar		commons-dbcp:commons-dbcp:1.4 ✓		0		34
commons-pool-1.6.jar		commons-pool:commons-pool:1.6 ✓		0		36
exo.kernel.component.common-5.3.x-SNAPSHOT.jar		org.exoplatform.kernel:exo.kernel.component.common:5.3.x-SNAPSHOT		0		22
xmlpull-1.1.3.1.jar		xmlpull:xmlpull:1.1.3.1 ✓		0		18
xpp3_min-1.1.4c.jar		xpp3:xpp3_min:1.1.4c ✓		0		24
xstream-1.4.10.jar	cpe:/a:xstream_project:xstream:1.4.10	com.thoughtworks.xstream:xstream:1.4.10 ✓		0	Low	53
commons-api-5.3.x-SNAPSHOT.jar		org.exoplatform.commons:commons-api:5.3.x-SNAPSHOT		0		26
platform-ui-skin-5.3.x-SNAPSHOT.war		org.exoplatform.platform-ui:platform-ui-skin:5.3.x-SNAPSHOT		0		24
pc-portlet-5.3.x-SNAPSHOT.jar		org.exoplatform.gatein.pc:pc-portlet:5.3.x-SNAPSHOT		0		27
pc-federation-5.3.x-SNAPSHOT.jar		org.exoplatform.gatein.pc:pc-federation:5.3.x-SNAPSHOT		0		27
pc-bridge-5.3.x-SNAPSHOT.jar		org.exoplatform.gatein.pc:pc-bridge:5.3.x-SNAPSHOT		0		29
log4j-1.2.17.jar	cpe:/a:apache:log4j:2.0:alpha1	log4j:log4j:1.2.17 ✓	High	1	High	33
stax-api-1.0-2.jar		javax.xml.stream:stax-api:1.0-2 ✓		0		20
activation-1.1.1.jar		javax.activation:activation:1.1.1 ✓		0		24
jaxb-api-2.1.jar		javax.xml.bind:jaxb-api:2.1 ✓		0		15
jaxb-impl-2.1.8.jar		com.sun.xml.bind:jaxb-impl:2.1.8 ✓		0		20
picketlink-idm-core-1.4.6.Final.jar	cpe:/a:picketlink:picketlink:1.4.6	org.picketlink.idm:picketlink-idm-core:1.4.6.Final ✓	Medium	3	Low	37
common-logging-2.2.2.Final.jar		org.gatein.common:common-logging:2.2.2.Final ✓		0		31
mop-api-1.3.2.Final.jar		org.gatein.mop:mop-api:1.3.2.Final		0		30
mop-spi-1.3.2.Final.jar		org.gatein.mop:mop-spi:1.3.2.Final		0		30
mop-core-1.3.2.Final.jar		org.gatein.mop:mop-core:1.3.2.Final		0		30
gatein-management-api-2.1.0.Final.jar		org.gatein.management:gatein-management-api:2.1.0.Final		0		28
gatein-management-spi-2.1.0.Final.jar		org.gatein.management:gatein-management-spi:2.1.0.Final		0		28
commons-lang3-3.3.2.jar		org.apache.commons:commons-lang3:3.3.2 ✓		0		37
json-20070829.jar		org.json:json:20070829 ✓		0		23
commons-chain-1.2.jar		commons-chain:commons-chain:1.2 ✓		0		34
commons-codec-1.10.jar		commons-codec:commons-codec:1.10 ✓		0		38
commons-httpclient-3.1.jar	cpe:/a:apache:httpclient:3.1 cpe:/a:apache:commons-httpclient:3.1	commons-httpclient:commons-httpclient:3.1 ✓		0	Low	24
ical4j-1.0-beta5.jar		ical4j:ical4j:1.0-beta5		0		21
jackrabbit-webdav-1.6.5.jar	cpe:/a:apache:jackrabbit:1.6.5	org.apache.jackrabbit:jackrabbit-webdav:1.6.5 ✓	Medium	1	Low	26
bayeux-api-3.0.8.jar		org.cometd.java:bayeux-api:3.0.8 ✓		0		29
cometd-java-common-3.0.8.jar		org.cometd.java:cometd-java-common:3.0.8 ✓		0		29
cometd-java-websocket-javax-server-3.0.8.jar		org.cometd.java:cometd-java-websocket-javax-server:3.0.8 ✓		0		29
cometd-java-websocket-common-server-3.0.8.jar		org.cometd.java:cometd-java-websocket-common-server:3.0.8 ✓		0		29
cometd-java-annotations-3.0.8.jar		org.cometd.java:cometd-java-annotations:3.0.8 ✓		0		29
jetty-io-9.2.14.v20151106.jar		org.eclipse.jetty:jetty-io:9.2.14.v20151106 ✓		0		35
cometd-java-client-3.0.8.jar		org.cometd.java:cometd-java-client:3.0.8 ✓		0		29
cometd-java-websocket-common-client-3.0.8.jar		org.cometd.java:cometd-java-websocket-common-client:3.0.8 ✓		0		29
cometd-java-websocket-javax-client-3.0.8.jar		org.cometd.java:cometd-java-websocket-javax-client:3.0.8 ✓		0		29
cometd-java-oort-3.0.8.jar		org.cometd.java:cometd-java-oort:3.0.8 ✓		0		29
jetty-jmx-9.2.14.v20151106.jar	cpe:/a:jetty:jetty:9.2.14.v20151106 cpe:/a:eclipse:jetty:9.2.14.v20151106	org.eclipse.jetty:jetty-jmx:9.2.14.v20151106 ✓	High	4	Low	37
cometd-java-server-3.0.8.jar		org.cometd.java:cometd-java-server:3.0.8 ✓		0		29
commons-comet-service-5.3.x-SNAPSHOT.jar		org.exoplatform.commons:commons-comet-service:5.3.x-SNAPSHOT		0		26
jsr250-api-1.0.jar		javax.annotation:jsr250-api:1.0 ✓		0		20
aspectjrt-1.8.8.jar		org.aspectj:aspectjrt:1.8.8 ✓		0		21
owasp-java-html-sanitizer-20160413.1.jar	cpe:/a:owasp-java-html-sanitizer_project:owasp-java-html-sanitizer:20160413.1	com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer:20160413.1 ✓		0	Low	21
jrcs.diff-0.4.2.jar		org.jvnet.hudson:org.suigeneris.jrcs.diff:0.4.2 ✓		0		17
ecs-1.4.2.jar		ecs:ecs:1.4.2 ✓		0		14
liquibase-core-3.4.2.jar		org.liquibase:liquibase-core:3.4.2 ✓		0		19
hibernate-entitymanager-4.2.21.Final.jar		org.hibernate:hibernate-entitymanager:4.2.21.Final ✓		0		32
commons-component-common-5.3.x-SNAPSHOT.jar		org.exoplatform.commons:commons-component-common:5.3.x-SNAPSHOT		0		26
exo.core.component.security.core-5.3.x-SNAPSHOT.jar		org.exoplatform.core:exo.core.component.security.core:5.3.x-SNAPSHOT		0		22
picocontainer-1.1.jar		picocontainer:picocontainer:1.1 ✓		0		28
jdom-1.0.jar		jdom:jdom:1.0 ✓		0		33
rome-1.0.jar		rome:rome:1.0 ✓		0		32
calendar-service-5.3.x-SNAPSHOT.jar		org.exoplatform.calendar:calendar-service:5.3.x-SNAPSHOT		0		26
icu4j-56.1.jar	cpe:/a:icu-project:international_components_for_unicode:56.1::~~~c%2fc%2b%2b~~	com.ibm.icu:icu4j:56.1 ✓	High	8	Highest	33
itunes-com-podcast-0.2.jar	cpe:/a:apple:itunes:0.2	com.totsp.feedpod:itunes-com-podcast:0.2 ✓	High	584	Low	29
jsr311-api-1.1.1.jar		javax.ws.rs:jsr311-api:1.1.1 ✓		0		28
jurt-3.2.1.jar	cpe:/a:openoffice:openoffice.org:3.2.1 cpe:/a:openoffice:openoffice:3.2.1	org.openoffice:jurt:3.2.1 ✓	High	8	Highest	18
juh-3.2.1.jar	cpe:/a:openoffice:openoffice.org:3.2.1 cpe:/a:openoffice:openoffice:3.2.1	org.openoffice:juh:3.2.1 ✓	High	8	Highest	20
ridl-3.2.1.jar	cpe:/a:openoffice:openoffice.org:3.2.1 cpe:/a:openoffice:openoffice:3.2.1	org.openoffice:ridl:3.2.1 ✓	High	8	Highest	18
unoil-3.2.1.jar	cpe:/a:openoffice:openoffice.org:3.2.1 cpe:/a:openoffice:openoffice:3.2.1	org.openoffice:unoil:3.2.1 ✓	High	8	Highest	18
jodconverter-core-3.0-eXo03.jar		org.artofsolving.jodconverter:jodconverter-core:3.0-eXo03		0		21
exo-jcr-services-5.3.x-SNAPSHOT.jar		org.exoplatform:exo-jcr-services:5.3.x-SNAPSHOT		0		22
commons-webui-ext-5.3.x-SNAPSHOT.jar		org.exoplatform.commons:commons-webui-ext:5.3.x-SNAPSHOT		0		24
exo.jcr.component.webdav-5.3.x-SNAPSHOT.jar		org.exoplatform.jcr:exo.jcr.component.webdav:5.3.x-SNAPSHOT		0		22
exo.kernel.component.cache-5.3.x-SNAPSHOT.jar		org.exoplatform.kernel:exo.kernel.component.cache:5.3.x-SNAPSHOT		0		22
jtidy-r938.jar	cpe:/a:html-tidy:tidy:-	net.sf.jtidy:jtidy:r938 ✓		0	Low	25
exo.core.component.xml-processing-5.3.x-SNAPSHOT.jar	cpe:/a:processing:processing:5.3	org.exoplatform.core:exo.core.component.xml-processing:5.3.x-SNAPSHOT		0	Low	22
exo.core.component.script.groovy-5.3.x-SNAPSHOT.jar		org.exoplatform.core:exo.core.component.script.groovy:5.3.x-SNAPSHOT		0		22
pc-api-5.3.x-SNAPSHOT.jar		org.exoplatform.gatein.pc:pc-api:5.3.x-SNAPSHOT		0		27
jai-core-1.1.3.jar		javax.media:jai-core:1.1.3		0		21
jai-codec-1.1.3.jar		com.sun.media:jai-codec:1.1.3		0		22
icepdf-core-5.1.1.jar		org.icepdf.os:icepdf-core:5.1.1		0		17
imgscalr-lib-4.2.jar		org.imgscalr:imgscalr-lib:4.2 ✓		0		23
jdom-1.1.3.jar		org.jdom:jdom:1.1.3 ✓		0		44
ecms-core-services-5.3.x-SNAPSHOT.jar	cpe:/a:no-cms_project:no-cms:5.3	org.exoplatform.ecms:ecms-core-services:5.3.x-SNAPSHOT		0	Low	26
commons-component-product-5.3.x-SNAPSHOT.jar		org.exoplatform.commons:commons-component-product:5.3.x-SNAPSHOT		0		28
commons-component-upgrade-5.3.x-SNAPSHOT.jar		org.exoplatform.commons:commons-component-upgrade:5.3.x-SNAPSHOT		0		24
forum-component-rendering-5.3.x-SNAPSHOT.jar		org.exoplatform.forum:forum-component-rendering:5.3.x-SNAPSHOT		0		24
forum-application-common-5.3.x-SNAPSHOT.jar		org.exoplatform.forum:forum-application-common:5.3.x-SNAPSHOT		0		24
forum-component-common-5.3.x-SNAPSHOT.jar		org.exoplatform.forum:forum-component-common:5.3.x-SNAPSHOT		0		24
chromattic.api-1.3.0.jar		org.chromattic:chromattic.api:1.3.0 ✓		0		23
forum-forum-service-5.3.x-SNAPSHOT.jar		org.exoplatform.forum:forum-forum-service:5.3.x-SNAPSHOT		0		24
reflext.api-1.1.0.jar		org.reflext:reflext.api:1.1.0 ✓		0		23
reflext.core-1.1.0.jar		org.reflext:reflext.core:1.1.0 ✓		0		23
reflext.spi-1.1.0.jar		org.reflext:reflext.spi:1.1.0 ✓		0		25
reflext.jlr-1.1.0.jar		org.reflext:reflext.jlr:1.1.0 ✓		0		23
chromattic.core-1.3.0.jar		org.chromattic:chromattic.core:1.3.0 ✓		0		23
reflext.apt-1.1.0.jar	cpe:/a:processing:processing:1.1.0	org.reflext:reflext.apt:1.1.0 ✓	Medium	1	Low	23
chromattic.apt-1.3.0.jar		org.chromattic:chromattic.apt:1.3.0 ✓		0		23
chromattic.ext-1.3.0.jar		org.chromattic:chromattic.ext:1.3.0 ✓		0		25
chromattic.spi-1.3.0.jar		org.chromattic:chromattic.spi:1.3.0 ✓		0		25
social-component-common-5.3.x-SNAPSHOT.jar		org.exoplatform.social:social-component-common:5.3.x-SNAPSHOT		0		26
common-common-2.2.2.Final.jar		org.gatein.common:common-common:2.2.2.Final ✓		0		31
caja-r5054.jar		com.google.caja:caja:r5054		0		23
htmlparser-r4209.jar		caja:htmlparser:r4209		0		24
oauth-20100527.jar		net.oauth.core:oauth:20100527 ✓		0		18
oauth-consumer-20090617.jar		net.oauth.core:oauth-consumer:20090617		0		17
oauth-httpclient4-20090913.jar		net.oauth.core:oauth-httpclient4:20090913		0		20
oauth-provider-20100527.jar		net.oauth.core:oauth-provider:20100527 ✓		0		18
guava-20.0.jar	cpe:/a:google:guava:20.0	com.google.guava:guava:20.0 ✓	Medium	1	Highest	29
aopalliance-1.0.jar		aopalliance:aopalliance:1.0 ✓		0		20
guice-3.0.jar		com.google.inject:guice:3.0 ✓		0		29
guice-multibindings-3.0.jar		com.google.inject.extensions:guice-multibindings:3.0 ✓		0		29
nekohtml-1.9.22.jar		net.sourceforge.nekohtml:nekohtml:1.9.22 ✓		0		20
xercesImpl-2.9.1.jar	cpe:/a:apache:xerces2_java:2.9.1	xerces:xercesImpl:2.9.1 ✓	High	1	Low	50
sanselan-0.97-incubator.jar		org.apache.sanselan:sanselan:0.97-incubator ✓		0		35
social-component-core-5.3.x-SNAPSHOT.jar		org.exoplatform.social:social-component-core:5.3.x-SNAPSHOT		0		26
gwt-servlet-2.6.1.jar	cpe:/a:google:protobuf:2.5.0 cpe:/a:google:protobuf:2.6.1	com.google.gwt:gwt-servlet:2.6.1 ✓	Medium	1	Highest	27
commons-fileupload-1.3.3.jar	cpe:/a:apache:commons_fileupload:1.3.3	commons-fileupload:commons-fileupload:1.3.3 ✓		0	Low	40
commons-io-2.4.jar		commons-io:commons-io:2.4 ✓		0		36
chromattic.common-1.3.0.jar		org.chromattic:chromattic.common:1.3.0 ✓		0		25
chromattic.metamodel-1.3.0.jar		org.chromattic:chromattic.metamodel:1.3.0 ✓		0		23
jdom2-2.0.5.jar		org.jdom:jdom2:2.0.5 ✓		0		43
htmlcleaner-2.7.jar	cpe:/a:htmlcleaner_project:htmlcleaner:2.7	net.sourceforge.htmlcleaner:htmlcleaner:2.7 ✓		0	Low	20
stax-utils-20070216.jar		net.java.dev.stax-utils:stax-utils:20070216 ✓		0		20
xwiki-commons-xml-5.4.7.jar	cpe:/a:xwiki:xwiki:5.4.7	org.xwiki.commons:xwiki-commons-xml:5.4.7	Low	1	Low	26
jcommon-1.0.17.jar		org.jfree:jcommon:1.0.17 ✓		0		23
jfreechart-1.0.14.jar		org.jfree:jfreechart:1.0.14 ✓		0		25
velocity-1.7.jar		org.apache.velocity:velocity:1.7 ✓		0		33
velocity-tools-1.4.jar	cpe:/a:apache:struts:1.4	velocity-tools:velocity-tools:1.4 ✓		0	Low	19
ezmorph-1.0.6.jar		net.sf.ezmorph:ezmorph:1.0.6 ✓		0		22
json-lib-2.4-jdk15.jar		com.hynnet:json-lib:2.4 ✓		0		15
commons-configuration-1.10.jar		commons-configuration:commons-configuration:1.10 ✓		0		36
snuggletex-core-1.1.0.jar		uk.ac.ed.ph.snuggletex:snuggletex-core:1.1.0		0		18
batik-css-1.7.jar	cpe:/a:apache:batik:1.7	org.apache.xmlgraphics:batik-css:1.7 ✓	High	3	Highest	22
xmlgraphics-commons-1.3.1.jar		org.apache.xmlgraphics:xmlgraphics-commons:1.3.1 ✓		0		25
jeuclid-core-3.1.5.jar		net.sourceforge.jeuclid:jeuclid-core:3.1.5 ✓		0		22
snuggletex-jeuclid-1.1.0.jar		uk.ac.ed.ph.snuggletex:snuggletex-jeuclid:1.1.0		0		18
serializer-2.7.1.jar	cpe:/a:apache:xalan-java:2.7.1	xalan:serializer:2.7.1 ✓	High	1	Highest	26
xalan-2.7.1.jar	cpe:/a:apache:xalan-java:2.7.1	xalan:xalan:2.7.1 ✓	High	1	Highest	40
wiki-renderer-5.3.x-SNAPSHOT.jar		org.exoplatform.wiki:wiki-renderer:5.3.x-SNAPSHOT		0		24
wci-wci-5.3.x-SNAPSHOT.jar		org.exoplatform.gatein.wci:wci-wci:5.3.x-SNAPSHOT		0		27
antlr-2.7.7.jar		antlr:antlr:2.7.7 ✓		0		18
dom4j-1.6.1.jar	cpe:/a:dom4j_project:dom4j:1.6.1	dom4j:dom4j:1.6.1 ✓	Medium	1	Highest	31
javassist-3.20.0-GA.jar		org.javassist:javassist:3.20.0-GA ✓		0		27
jboss-transaction-api_1.1_spec-1.0.1.Final.jar		org.jboss.spec.javax.transaction:jboss-transaction-api_1.1_spec:1.0.1.Final ✓		0		38
hibernate-jpa-2.0-api-1.0.1.Final.jar		org.hibernate.javax.persistence:hibernate-jpa-2.0-api:1.0.1.Final ✓		0		26
hibernate-core-4.2.21.Final.jar		org.hibernate:hibernate-core:4.2.21.Final ✓		0		32
jboss-logging-annotations-1.2.0.Beta1.jar		org.jboss.logging:jboss-logging-annotations:1.2.0.Beta1 ✓		0		30
hibernate-commons-annotations-4.0.5.Final.jar		org.hibernate.common:hibernate-commons-annotations:4.0.5.Final ✓		0		30
jackson-annotations-2.3.0.jar	cpe:/a:fasterxml:jackson:2.3.0	com.fasterxml.jackson.core:jackson-annotations:2.3.0 ✓		0	Low	37
jackson-core-2.3.1.jar	cpe:/a:fasterxml:jackson:2.3.1	com.fasterxml.jackson.core:jackson-core:2.3.1 ✓		0	Low	37
jackson-databind-2.3.1.jar	cpe:/a:fasterxml:jackson:2.3.1 cpe:/a:fasterxml:jackson-databind:2.3.1	com.fasterxml.jackson.core:jackson-databind:2.3.1 ✓	High	12	Highest	37
social-component-service-5.3.x-SNAPSHOT.jar		org.exoplatform.social:social-component-service:5.3.x-SNAPSHOT		0		26
itext-2.1.7.jar		com.lowagie:itext:2.1.7 ✓		0		23
validation-api-1.1.0.Final.jar		javax.validation:validation-api:1.1.0.Final ✓		0		22
sac-1.3.jar		org.w3c.css:sac:1.3 ✓		0		27
cssparser-0.9.18.jar		net.sourceforge.cssparser:cssparser:0.9.18 ✓		0		27
bcmail-jdk15-1.45.jar	cpe:/a:no-cms_project:no-cms:1.45	org.bouncycastle:bcmail-jdk15:1.45 ✓		0	Low	24
bcprov-jdk15-1.45.jar	cpe:/a:bouncycastle:bouncy-castle-crypto-package:1.45 cpe:/a:bouncycastle:bouncy_castle_crypto_package:1.45	org.bouncycastle:bcprov-jdk15:1.45 ✓	Medium	1	Low	24
bctsp-jdk15-1.45.jar		org.bouncycastle:bctsp-jdk15:1.45 ✓		0		24
mchange-commons-java-0.2.3.4.jar		com.mchange:mchange-commons-java:0.2.3.4 ✓		0		19
c3p0-0.9.2.1.jar	cpe:/a:mchange:c3p0:0.9.2.1	com.mchange:c3p0:0.9.2.1 ✓	Medium	1	Highest	24
hibernate-c3p0-4.2.21.Final.jar		org.hibernate:hibernate-c3p0:4.2.21.Final ✓		0		32
exo.core.component.organization.jdbc-5.3.x-SNAPSHOT.jar		org.exoplatform.core:exo.core.component.organization.jdbc:5.3.x-SNAPSHOT		0		24
jrcs.rcs-0.4.2.jar		org.jvnet.hudson:org.suigeneris.jrcs.rcs:0.4.2 ✓		0		17
flying-saucer-core-9.0.8.jar		org.xhtmlrenderer:flying-saucer-core:9.0.8 ✓		0		21
flying-saucer-pdf-9.0.8.jar		org.xhtmlrenderer:flying-saucer-pdf:9.0.8 ✓		0		23
xpp3-1.1.4c.jar		xpp3:xpp3:1.1.4c ✓		0		26
wiki-service-5.3.x-SNAPSHOT.jar		org.exoplatform.wiki:wiki-service:5.3.x-SNAPSHOT		0		24
exo.ws.rest.core-5.3.x-SNAPSHOT.jar	cpe:/a:ws_project:ws:5.3	org.exoplatform.ws:exo.ws.rest.core:5.3.x-SNAPSHOT		0	Low	22
json-simple-1.1.1.jar		com.googlecode.json-simple:json-simple:1.1.1 ✓		0		23
httpcore-4.3.3.jar		org.apache.httpcomponents:httpcore:4.3.3 ✓		0		32
commons-logging-1.1.3.jar		commons-logging:commons-logging:1.1.3 ✓		0		36
httpclient-4.3.6.jar	cpe:/a:apache:httpclient:4.3.6	org.apache.httpcomponents:httpclient:4.3.6 ✓		0	Low	32
stax2-api-3.1.4.jar		org.codehaus.woodstox:stax2-api:3.1.4 ✓		0		29
jackson-dataformat-xml-2.4.2.jar	cpe:/a:fasterxml:jackson-databind:2.4.2 cpe:/a:fasterxml:jackson:2.4.2	com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.4.2 ✓	High	12	Highest	37
swagger-annotations-1.5.0.jar		io.swagger:swagger-annotations:1.5.0 ✓		0		24
swagger-models-1.5.0.jar		io.swagger:swagger-models:1.5.0 ✓		0		24
swagger-core-1.5.0.jar		io.swagger:swagger-core:1.5.0 ✓		0		17
reflections-0.9.9.jar		org.reflections:reflections:0.9.9 ✓		0		19
swagger-jaxrs-1.5.0.jar		io.swagger:swagger-jaxrs:1.5.0 ✓		0		17
commons-search-5.3.x-SNAPSHOT.jar	cpe:/a:pro_search:pro_search:5.3	org.exoplatform.commons:commons-search:5.3.x-SNAPSHOT		0	Low	24
integ-search-service-5.3.x-SNAPSHOT.jar	cpe:/a:pro_search:pro_search:5.3	org.exoplatform.integration:integ-search-service:5.3.x-SNAPSHOT		0	Low	24
c3p0-0.9.1.1.jar	cpe:/a:mchange:c3p0:0.9.1.1	c3p0:c3p0:0.9.1.1 ✓	Medium	1	Highest	23
xml-apis-1.4.01.jar		xml-apis:xml-apis:1.4.01 ✓		0		49
freemarker-2.3.18.jar		org.freemarker:freemarker:2.3.18 ✓		0		25
wikbook.template.core-0.9.45.jar		org.wikbook:wikbook.template.core:0.9.45 ✓		0		23
doc-style-5.3.x-SNAPSHOT.jar	cpe:/a:style_it_project:style_it:5.3	org.exoplatform.doc:doc-style:5.3.x-SNAPSHOT		0	Low	24
annotations-2.0.1.jar		com.google.code.findbugs:annotations:2.0.1 ✓		0		23
protobuf-java-3.0.2.jar	cpe:/a:google:protobuf:3.0.2	com.google.protobuf:protobuf-java:3.0.2 ✓	Medium	1	Highest	29
jsr305-3.0.1.jar		com.google.code.findbugs:jsr305:3.0.1 ✓		0		23
social-component-webui-5.3.x-SNAPSHOT.jar		org.exoplatform.social:social-component-webui:5.3.x-SNAPSHOT		0		26
geronimo-stax-api_1.0_spec-1.0.1.jar		org.apache.geronimo.specs:geronimo-stax-api_1.0_spec:1.0.1 ✓		0		26
forum-component-bbcode-5.3.x-SNAPSHOT.jar		org.exoplatform.forum:forum-component-bbcode:5.3.x-SNAPSHOT		0		24
commons-file-storage-5.3.x-SNAPSHOT.jar		org.exoplatform.commons:commons-file-storage:5.3.x-SNAPSHOT		0		24
social-component-core-jpa-5.3.x-SNAPSHOT.jar		org.exoplatform.social:social-component-core-jpa:5.3.x-SNAPSHOT		0		26
jackson-core-2.4.2.jar	cpe:/a:fasterxml:jackson:2.4.2	com.fasterxml.jackson.core:jackson-core:2.4.2 ✓		0	Low	37
jackson-annotations-2.4.0.jar	cpe:/a:fasterxml:jackson:2.4.0	com.fasterxml.jackson.core:jackson-annotations:2.4.0 ✓		0	Low	37
jackson-databind-2.4.2.jar	cpe:/a:fasterxml:jackson-databind:2.4.2 cpe:/a:fasterxml:jackson:2.4.2	com.fasterxml.jackson.core:jackson-databind:2.4.2 ✓	High	12	Highest	37
ecms-core-publication-5.3.x-SNAPSHOT.jar		org.exoplatform.ecms:ecms-core-publication:5.3.x-SNAPSHOT		0		26
ecms-core-search-5.3.x-SNAPSHOT.jar	cpe:/a:pro_search:pro_search:5.3	org.exoplatform.ecms:ecms-core-search:5.3.x-SNAPSHOT		0	Low	24
ecms-core-connector-5.3.x-SNAPSHOT.jar		org.exoplatform.ecms:ecms-core-connector:5.3.x-SNAPSHOT		0		26
ecms-core-webui-5.3.x-SNAPSHOT.jar		org.exoplatform.ecms:ecms-core-webui:5.3.x-SNAPSHOT		0		26
ecms-core-publication-plugins-5.3.x-SNAPSHOT.jar		org.exoplatform.ecms:ecms-core-publication-plugins:5.3.x-SNAPSHOT		0		26
ecms-core-viewer-5.3.x-SNAPSHOT.jar		org.exoplatform.ecms:ecms-core-viewer:5.3.x-SNAPSHOT		0		26
ecms-ext-authoring-services-5.3.x-SNAPSHOT.jar		org.exoplatform.ecms:ecms-ext-authoring-services:5.3.x-SNAPSHOT		0		24
ecms-core-webui-explorer-5.3.x-SNAPSHOT.jar	cpe:/a:content_project:content:5.3	org.exoplatform.ecms:ecms-core-webui-explorer:5.3.x-SNAPSHOT		0	Low	26
integ-social-ecms-5.3.x-SNAPSHOT.jar		org.exoplatform.integration:integ-social-ecms:5.3.x-SNAPSHOT		0		26
social-component-notification-5.3.x-SNAPSHOT.jar		org.exoplatform.social:social-component-notification:5.3.x-SNAPSHOT		0		26
javaparser-1.0.8.jar		com.google.code.javaparser:javaparser:1.0.8		0		20
chromattic.testgenerator-1.3.0.jar		org.chromattic:chromattic.testgenerator:1.3.0 ✓		0		23
ehcache-core-2.6.9.jar: sizeof-agent.jar		net.sf.ehcache:sizeof-agent:1.0.1		0		26
closure-compiler-v20170910.jar/META-INF/maven/com.google.javascript/closure-compiler/pom.xml	cpe:/a:google:gmail:-	com.google.javascript:closure-compiler:v20170910	Medium	1	Low	15
jboss-marshalling-osgi-2.0.0.Beta3.jar/META-INF/maven/org.jboss.marshalling/jboss-marshalling/pom.xml		org.jboss.marshalling:jboss-marshalling:2.0.0.Beta3		0		13
jboss-marshalling-osgi-2.0.0.Beta3.jar/META-INF/maven/org.jboss.marshalling/jboss-marshalling-river/pom.xml		org.jboss.marshalling:jboss-marshalling-river:2.0.0.Beta3		0		13
jboss-marshalling-osgi-2.0.0.Beta3.jar/META-INF/maven/org.jboss.marshalling/jboss-marshalling-serial/pom.xml		org.jboss.marshalling:jboss-marshalling-serial:2.0.0.Beta3		0		13
jackson-dataformat-yaml-2.4.2.jar/META-INF/maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml/pom.xml	cpe:/a:fasterxml:jackson:2.4.2	com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.4.2		0	Low	16
jackson-dataformat-yaml-2.4.2.jar/META-INF/maven/org.yaml/snakeyaml/pom.xml		org.yaml:snakeyaml:1.12		0		11

Dependencies

groovy-all-2.4.12.jar

Description: Groovy: A powerful, dynamic language for the JVM

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/ciagent/.m2/repository/org/codehaus/groovy/groovy-all/2.4.12/groovy-all-2.4.12.jar
MD5: dddb0b3d3619875fa1c538c743ae8f99
SHA1: 760afc568cbd94c09d78f801ce51aed1326710af
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	extension-name	groovy	Medium
Vendor	pom	artifactid	groovy-all	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	url	http://groovy-lang.org	Highest
Vendor	central	groupid	org.codehaus.groovy	Highest
Vendor	pom	groupid	org.codehaus.groovy	Highest
Vendor	pom	organization url	http://groovy-lang.org	Medium
Vendor	pom	groupid	codehaus.groovy	Highest
Vendor	manifest	Bundle-Description	Groovy Runtime	Medium
Vendor	file	name	groovy-all	High
Vendor	pom	name	Apache Groovy	High
Vendor	pom	organization name	Apache Software Foundation	High
Vendor	pom	description	Groovy: A powerful, dynamic language for the JVM	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	originally-created-by	1.8.0_131-b11 (Oracle Corporation)	Low
Vendor	Manifest	bundle-symbolicname	groovy-all	Medium
Product	Manifest	extension-name	groovy	Medium
Product	pom	artifactid	groovy-all	Highest
Product	pom	groupid	codehaus.groovy	Low
Product	central	artifactid	groovy-all	Highest
Product	manifest	Bundle-Description	Groovy Runtime	Medium
Product	pom	organization url	http://groovy-lang.org	Low
Product	file	name	groovy-all	High
Product	pom	name	Apache Groovy	High
Product	Manifest	Implementation-Title	Groovy: a powerful, dynamic language for the JVM	High
Product	Manifest	specification-title	Groovy: a powerful, dynamic language for the JVM	Medium
Product	pom	description	Groovy: A powerful, dynamic language for the JVM	Medium
Product	Manifest	Bundle-Name	Groovy Runtime	Medium
Product	pom	organization name	Apache Software Foundation	Low
Product	Manifest	originally-created-by	1.8.0_131-b11 (Oracle Corporation)	Low
Product	Manifest	bundle-symbolicname	groovy-all	Medium
Product	pom	url	http://groovy-lang.org	Medium
Version	pom	version	2.4.12	Highest
Version	Manifest	Implementation-Version	2.4.12	High
Version	central	version	2.4.12	Highest
Version	file	version	2.4.12	Highest

Identifiers

maven: org.codehaus.groovy:groovy-all:2.4.12 ✓ Confidence:Highest
cpe: cpe:/a:apache:groovy:2.4.12 Confidence:Low

juzu-core-1.2.x-SNAPSHOT.jar

Description: Where all the magic happens

File Path: /home/ciagent/.m2/repository/org/juzu/juzu-core/1.2.x-SNAPSHOT/juzu-core-1.2.x-SNAPSHOT.jar
MD5: 09c5a154eee34ed0ee507f6da83fa8b2
SHA1: e6a6902c5ab23608ed0a724381c8a0b92421b8f3
Referenced In Project/Scope: eXo PLF:: Integration - Search - Portlet:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	impl	Low
Vendor	pom	groupid	org.juzu	Highest
Vendor	file	name	juzu-core	High
Vendor	pom	groupid	juzu	Highest
Vendor	pom	parent-groupid	org.juzu	Medium
Vendor	pom	artifactid	juzu-core	Low
Vendor	pom	parent-artifactid	juzu-parent	Low
Vendor	pom	name	Juzu Core	High
Vendor	jar	package name	juzu	Low
Vendor	pom	description	Where all the magic happens	Medium
Product	jar	package name	impl	Low
Product	file	name	juzu-core	High
Product	pom	artifactid	juzu-core	Highest
Product	pom	name	Juzu Core	High
Product	pom	parent-artifactid	juzu-parent	Medium
Product	pom	groupid	juzu	Low
Product	pom	description	Where all the magic happens	Medium
Product	pom	parent-groupid	org.juzu	Low
Version	pom	version	1.2.x-20190512.073002-50	Highest
Version	pom	version	1.2.x-SNAPSHOT	Highest
Version	file	version	1.2	Highest

Identifiers

maven: org.juzu:juzu-core:1.2.x-SNAPSHOT Confidence:High

rhino-1.7R3.jar

Description: Rhino is an open-source implementation of JavaScript written entirely in Java. It is typically embedded into Java applications to provide scripting to end users.

License:

Mozilla Public License, Version 1.1: http://www.mozilla.org/MPL/MPL-1.1.txt
GNU General Public License, Version 2: http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt

File Path: /home/ciagent/.m2/repository/org/mozilla/rhino/1.7R3/rhino-1.7R3.jar
MD5: 9dbdb24663f20db43a2c29467c13a204
SHA1: 3bff1e632c665f8cf2d438f77a9f4d0758277db5
Referenced In Project/Scope: eXo PLF:: Integration - Search - Portlet:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	rhino	Low
Vendor	pom	organization url	http://www.mozilla.org	Medium
Vendor	Manifest	Implementation-Vendor	Mozilla Foundation	High
Vendor	pom	url	http://www.mozilla.org/rhino/	Highest
Vendor	central	groupid	org.mozilla	Highest
Vendor	Manifest	implementation-url	http://www.mozilla.org/rhino	Low
Vendor	pom	organization name	The Mozilla Foundation	High
Vendor	file	name	rhino	High
Vendor	pom	description	Rhino is an open-source implementation of JavaScript written entirely in Java. It is typically embedded into Java applications to provide scripting to end users.	Low
Vendor	pom	name	Mozilla Rhino	High
Vendor	pom	groupid	org.mozilla	Highest
Vendor	pom	groupid	mozilla	Highest
Product	pom	organization name	The Mozilla Foundation	Low
Product	file	name	rhino	High
Product	pom	description	Rhino is an open-source implementation of JavaScript written entirely in Java. It is typically embedded into Java applications to provide scripting to end users.	Low
Product	pom	url	http://www.mozilla.org/rhino/	Medium
Product	pom	name	Mozilla Rhino	High
Product	pom	groupid	mozilla	Low
Product	pom	artifactid	rhino	Highest
Product	Manifest	Implementation-Title	Mozilla Rhino 1.7R2	High
Product	Manifest	implementation-url	http://www.mozilla.org/rhino	Low
Product	pom	organization url	http://www.mozilla.org	Low
Product	central	artifactid	rhino	Highest
Version	central	version	1.7R3	Highest
Version	pom	version	1.7R3	Highest
Version	file	version	1.7.r3	Highest

Identifiers

maven: org.mozilla:rhino:1.7R3 ✓ Confidence:Highest

juzu-plugins-less-1.2.x-SNAPSHOT.jar

Description: The Less plugin

File Path: /home/ciagent/.m2/repository/org/juzu/juzu-plugins-less/1.2.x-SNAPSHOT/juzu-plugins-less-1.2.x-SNAPSHOT.jar
MD5: 6eacc141e7e978b12a87774443e2a251
SHA1: 235c82baa07e8b4422b8fa1330ac6e6df34cb42e
Referenced In Project/Scope: eXo PLF:: Integration - Search - Portlet:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	org.juzu	Highest
Vendor	pom	name	Juzu Less Plugin	High
Vendor	jar	package name	plugin	Low
Vendor	pom	groupid	juzu	Highest
Vendor	pom	parent-groupid	org.juzu	Medium
Vendor	jar	package name	less	Low
Vendor	pom	description	The Less plugin	Medium
Vendor	jar	package name	juzu	Low
Vendor	file	name	juzu-plugins-less	High
Vendor	pom	artifactid	juzu-plugins-less	Low
Vendor	pom	parent-artifactid	juzu-plugins-parent	Low
Product	jar	package name	impl	Low
Product	pom	name	Juzu Less Plugin	High
Product	jar	package name	plugin	Low
Product	pom	parent-artifactid	juzu-plugins-parent	Medium
Product	jar	package name	less	Low
Product	pom	artifactid	juzu-plugins-less	Highest
Product	pom	groupid	juzu	Low
Product	pom	description	The Less plugin	Medium
Product	file	name	juzu-plugins-less	High
Product	pom	parent-groupid	org.juzu	Low
Version	pom	version	1.2.x-SNAPSHOT	Highest
Version	file	version	1.2	Highest
Version	pom	version	1.2.x-20190512.073006-50	Highest
Version	file	name	juzu-plugins-less	Medium

Identifiers

maven: org.juzu:juzu-plugins-less:1.2.x-SNAPSHOT Confidence:High

juzu-plugins-portlet-1.2.x-SNAPSHOT.jar

Description: The Portlet plugin

File Path: /home/ciagent/.m2/repository/org/juzu/juzu-plugins-portlet/1.2.x-SNAPSHOT/juzu-plugins-portlet-1.2.x-SNAPSHOT.jar
MD5: 6d4963f5d1057f3634bb6ac403dfa88f
SHA1: 0fa43cef6e2dd3703af5b128dfb54c77ad91f272
Referenced In Project/Scope: eXo PLF:: Integration - Search - Portlet:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	juzu-plugins-portlet	High
Vendor	pom	groupid	org.juzu	Highest
Vendor	jar	package name	plugin	Low
Vendor	pom	groupid	juzu	Highest
Vendor	pom	parent-groupid	org.juzu	Medium
Vendor	jar	package name	portlet	Low
Vendor	pom	description	The Portlet plugin	Medium
Vendor	pom	artifactid	juzu-plugins-portlet	Low
Vendor	jar	package name	juzu	Low
Vendor	pom	parent-artifactid	juzu-plugins-parent	Low
Vendor	pom	name	Juzu Portlet Plugin	High
Product	file	name	juzu-plugins-portlet	High
Product	jar	package name	impl	Low
Product	jar	package name	plugin	Low
Product	pom	parent-artifactid	juzu-plugins-parent	Medium
Product	jar	package name	portlet	Low
Product	pom	description	The Portlet plugin	Medium
Product	pom	artifactid	juzu-plugins-portlet	Highest
Product	pom	groupid	juzu	Low
Product	pom	parent-groupid	org.juzu	Low
Product	pom	name	Juzu Portlet Plugin	High
Version	pom	version	1.2.x-SNAPSHOT	Highest
Version	file	version	1.2	Highest
Version	pom	version	1.2.x-20190512.073006-50	Highest
Version	file	name	juzu-plugins-portlet	Medium

Identifiers

maven: org.juzu:juzu-plugins-portlet:1.2.x-SNAPSHOT Confidence:High

javax.inject-1.jar

Description: The javax.inject API

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/ciagent/.m2/repository/javax/inject/javax.inject/1/javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	inject	Low
Vendor	pom	groupid	javax.inject	Highest
Vendor	pom	name	javax.inject	High
Vendor	file	name	javax.inject-1	High
Vendor	central	groupid	javax.inject	Highest
Vendor	pom	description	The javax.inject API	Medium
Vendor	pom	url	http://code.google.com/p/atinject/	Highest
Vendor	pom	artifactid	javax.inject	Low
Vendor	jar	package name	javax	Low
Product	jar	package name	inject	Low
Product	central	artifactid	javax.inject	Highest
Product	pom	url	http://code.google.com/p/atinject/	Medium
Product	pom	artifactid	javax.inject	Highest
Product	pom	groupid	javax.inject	Low
Product	pom	name	javax.inject	High
Product	file	name	javax.inject-1	High
Product	pom	description	The javax.inject API	Medium
Version	file	version	1	Medium
Version	pom	version	1	Highest
Version	central	version	1	Highest

Identifiers

maven: javax.inject:javax.inject:1 ✓ Confidence:Highest

portlet-api-2.0.jar

Description: The Java Portlet API version 2.0 developed by the Java Community Process JSR-286 Expert Group.

File Path: /home/ciagent/.m2/repository/javax/portlet/portlet-api/2.0/portlet-api-2.0.jar
MD5: 0ec08593cda1df33985391919996c740
SHA1: 1cd72f2a37fcf8ab9893a9468d7ba71c85fe2653
Referenced In Projects/Scopes:

eXo PLF:: Integration - Search - Portlet:provided
eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	Java Portlet Specification V2.0	High
Vendor	pom	artifactid	portlet-api	Low
Vendor	file	name	portlet-api	High
Vendor	central	groupid	javax.portlet	Highest
Vendor	pom	url	http://www.jcp.org/en/jsr/detail?id=286	Highest
Vendor	Manifest	bundle-symbolicname	javax.portlet	Medium
Vendor	pom	description	The Java Portlet API version 2.0 developed by the Java Community Process JSR-286 Expert Group.	Medium
Vendor	Manifest	bundle-docurl	http://www.jcp.org/en/jsr/detail?id=286	Low
Vendor	pom	groupid	javax.portlet	Highest
Product	pom	name	Java Portlet Specification V2.0	High
Product	pom	url	http://www.jcp.org/en/jsr/detail?id=286	Medium
Product	Manifest	Bundle-Name	JSR 286	Medium
Product	file	name	portlet-api	High
Product	pom	artifactid	portlet-api	Highest
Product	Manifest	bundle-symbolicname	javax.portlet	Medium
Product	pom	groupid	javax.portlet	Low
Product	pom	description	The Java Portlet API version 2.0 developed by the Java Community Process JSR-286 Expert Group.	Medium
Product	Manifest	bundle-docurl	http://www.jcp.org/en/jsr/detail?id=286	Low
Product	central	artifactid	portlet-api	Highest
Version	central	version	2.0	Highest
Version	file	version	2.0	Highest
Version	pom	version	2.0	Highest

Identifiers

maven: javax.portlet:portlet-api:2.0 ✓ Confidence:Highest

commons-lang-2.6.jar

Description: Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/ciagent/.m2/repository/commons-lang/commons-lang/2.6/commons-lang-2.6.jar
MD5: 4d5c1693079575b362edf41500630bbd
SHA1: 0ce1edb914c94ebc388f086c6827e8bdeec71ac2
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-docurl	http://commons.apache.org/lang/	Low
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	name	Commons Lang	High
Vendor	manifest	Bundle-Description	Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	central	groupid	org.netbeans.external	High
Vendor	Manifest	bundle-symbolicname	org.apache.commons.lang	Medium
Vendor	pom	description	Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	file	name	commons-lang	High
Vendor	central	groupid	commons-lang	High
Vendor	pom	artifactid	commons-lang	Low
Vendor	pom	groupid	commons-lang	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	url	http://commons.apache.org/lang/	Highest
Product	Manifest	bundle-docurl	http://commons.apache.org/lang/	Low
Product	Manifest	specification-title	Commons Lang	Medium
Product	pom	groupid	commons-lang	Low
Product	central	artifactid	commons-lang	High
Product	pom	name	Commons Lang	High
Product	manifest	Bundle-Description	Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.	Low
Product	pom	url	http://commons.apache.org/lang/	Medium
Product	Manifest	Implementation-Title	Commons Lang	High
Product	Manifest	bundle-symbolicname	org.apache.commons.lang	Medium
Product	pom	parent-groupid	org.apache.commons	Low
Product	pom	description	Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are considered to be so standard as to justify existence in java.lang.	Low
Product	file	name	commons-lang	High
Product	central	artifactid	org-apache-commons-lang	High
Product	pom	artifactid	commons-lang	Highest
Product	Manifest	Bundle-Name	Commons Lang	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Version	file	version	2.6	Highest
Version	Manifest	Implementation-Version	2.6	High

Identifiers

maven: org.netbeans.external:org-apache-commons-lang:RELEASE90 ✓ Confidence:Highest
maven: org.netbeans.external:org-apache-commons-lang:RELEASE110 ✓ Confidence:Highest
maven: org.netbeans.external:org-apache-commons-lang:RELEASE100 ✓ Confidence:Highest
maven: commons-lang:commons-lang:2.6 ✓ Confidence:Highest

jcr-1.0.1.jar

Description: Content Repository for Java technology API. Specifies a standard API to access content repositories in JavaTM 2 independently of implementation.

License:

Day License: http://www.day.com/maven/jsr170/licenses/day-spec-license.htm

File Path: /home/ciagent/.m2/repository/javax/jcr/jcr/1.0.1/jcr-1.0.1.jar
MD5: 4639c7b994528948dab1a4feb1f68d6f
SHA1: 567ee103cf7592e3cf036e1bf4e2e06b9f08e1a1
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jcr	High
Vendor	Manifest	extension-name	jcr	Medium
Vendor	pom	artifactid	jcr	Low
Vendor	pom	url	http://www.jcp.org/en/jsr/detail?id=170	Highest
Vendor	pom	name	Content Repository for Java Technology API	High
Vendor	pom	groupid	javax.jcr	Highest
Vendor	pom	organization name	Day Software Management AG	High
Vendor	pom	description	Content Repository for Java technology API. Specifies a standard API to access content repositories in JavaTM 2 independently of implementation.	Low
Vendor	pom	organization url	http://www.day.com/	Medium
Vendor	Manifest	specification-vendor	Day Software Management AG	Low
Vendor	Manifest	Implementation-Vendor	Day Software Management AG	High
Product	pom	groupid	javax.jcr	Low
Product	Manifest	specification-title	Content Repository for Java Technology API	Medium
Product	pom	url	http://www.jcp.org/en/jsr/detail?id=170	Medium
Product	file	name	jcr	High
Product	Manifest	extension-name	jcr	Medium
Product	pom	organization name	Day Software Management AG	Low
Product	Manifest	Implementation-Title	javax.jcr	High
Product	pom	organization url	http://www.day.com/	Low
Product	pom	name	Content Repository for Java Technology API	High
Product	pom	artifactid	jcr	Highest
Product	pom	description	Content Repository for Java technology API. Specifies a standard API to access content repositories in JavaTM 2 independently of implementation.	Low
Version	pom	version	1.0.1	Highest
Version	Manifest	Implementation-Version	1.0.1	High
Version	file	version	1.0.1	Highest

Identifiers

cpe: cpe:/a:content_project:content:1.0.1 Confidence:Low
maven: javax.jcr:jcr:1.0.1 Confidence:High

Published Vulnerabilities

CVE-2017-16111

Severity: Medium
CVSS Score: 5.0 (AV:N/AC:L/Au:N/C:N/I:N/A:P)
CWE: CWE-400 Uncontrolled Resource Consumption ('Resource Exhaustion')

The content module is a module to parse HTTP Content-* headers. It is used by the hapijs framework to provide this functionality. The module is vulnerable to regular expression denial of service when passed a specifically crafted Content-Type or Content-Disposition header.

MISC - https://nodesecurity.io/advisories/530

Vulnerable Software & Versions:

cpe:/a:content_project:content:3.0.5::~~~node.js~~ and all previous versions

exo.jcr.component.ext-5.3.x-SNAPSHOT.jar

Description: Implementation of Extension Service of Exoplatform SAS 'eXo JCR' project.

File Path: /home/ciagent/.m2/repository/org/exoplatform/jcr/exo.jcr.component.ext/5.3.x-SNAPSHOT/exo.jcr.component.ext-5.3.x-SNAPSHOT.jar
MD5: 9cb39725a65e03aee8c4731d1f19d011
SHA1: c44a164e5d5aba7f34d35c68672483649e322abc
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	exo.jcr.component.ext	Low
Vendor	file	name	exo.jcr.component.ext	High
Vendor	pom	name	eXo PLF:: JCR :: Component :: Extension Service	High
Vendor	Manifest	specification-vendor	eXo Platform SAS	Low
Vendor	Manifest	Implementation-Vendor	eXo Platform SAS	High
Vendor	pom	groupid	org.exoplatform.jcr	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.exoplatform.jcr	Medium
Vendor	pom	parent-artifactid	jcr-parent	Low
Vendor	pom	groupid	exoplatform.jcr	Highest
Vendor	pom	parent-groupid	org.exoplatform.jcr	Medium
Vendor	pom	description	Implementation of Extension Service of Exoplatform SAS 'eXo JCR' project.	Medium
Product	pom	groupid	exoplatform.jcr	Low
Product	file	name	exo.jcr.component.ext	High
Product	pom	name	eXo PLF:: JCR :: Component :: Extension Service	High
Product	pom	artifactid	exo.jcr.component.ext	Highest
Product	pom	parent-groupid	org.exoplatform.jcr	Low
Product	Manifest	Implementation-Title	eXo PLF:: JCR :: Component :: Extension Service	High
Product	pom	description	Implementation of Extension Service of Exoplatform SAS 'eXo JCR' project.	Medium
Product	Manifest	specification-title	exo-jcr	Medium
Product	pom	parent-artifactid	jcr-parent	Medium
Version	file	version	5.3	Highest
Version	Manifest	Implementation-Version	5.3.x-SNAPSHOT	High

Identifiers

maven: org.exoplatform.jcr:exo.jcr.component.ext:5.3.x-SNAPSHOT Confidence:High

mime-util-2.1.3.jar

Description: mime-util is a simple to use, small, light weight and fast open source java utility library that can detect MIME types from files, input streams, URL's and byte arrays. Due to the use of regular expressions and the java.nio packages it requires at least Java 1.4.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/ciagent/.m2/repository/eu/medsea/mimeutil/mime-util/2.1.3/mime-util-2.1.3.jar
MD5: 3d4f3e1a96eb79683197f1c8b182f4a6
SHA1: 0c9cfae15c74f62491d4f28def0dff1dabe52a47
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization url	http://www.medsea.eu	Medium
Vendor	pom	description	mime-util is a simple to use, small, light weight and fast open source java utility library that can detect MIME types from files, input streams, URL's and byte arrays. Due to the use of regular expressions and the java.nio packages it requires at least Java 1.4.	Low
Vendor	central	groupid	eu.medsea.mimeutil	Highest
Vendor	pom	groupid	eu.medsea.mimeutil	Highest
Vendor	manifest	Bundle-Description	mime-util is a simple to use, small, light weight and fast open source java utility library that can detect MIME types from files, input streams, URL's and byte arrays. Due to the use of regular expressions and the java.nio packages it requires at least Java 1.4.	Low
Vendor	Manifest	bundle-symbolicname	eu.medsea.mimeutil.mime-util	Medium
Vendor	pom	artifactid	mime-util	Low
Vendor	file	name	mime-util	High
Vendor	pom	url	http://www.medsea.eu/mime-util/	Highest
Vendor	Manifest	bundle-docurl	http://www.medsea.eu	Low
Vendor	pom	name	Mime Detection Utility	High
Vendor	pom	organization name	Medsea Business Solutions S.L.	High
Vendor	Manifest	url	http://www.medsea.eu/mime-util/	Low
Product	pom	description	mime-util is a simple to use, small, light weight and fast open source java utility library that can detect MIME types from files, input streams, URL's and byte arrays. Due to the use of regular expressions and the java.nio packages it requires at least Java 1.4.	Low
Product	pom	organization url	http://www.medsea.eu	Low
Product	Manifest	Bundle-Name	Mime Detection Utility	Medium
Product	pom	artifactid	mime-util	Highest
Product	manifest	Bundle-Description	mime-util is a simple to use, small, light weight and fast open source java utility library that can detect MIME types from files, input streams, URL's and byte arrays. Due to the use of regular expressions and the java.nio packages it requires at least Java 1.4.	Low
Product	Manifest	bundle-symbolicname	eu.medsea.mimeutil.mime-util	Medium
Product	file	name	mime-util	High
Product	pom	groupid	eu.medsea.mimeutil	Low
Product	central	artifactid	mime-util	Highest
Product	Manifest	bundle-docurl	http://www.medsea.eu	Low
Product	pom	organization name	Medsea Business Solutions S.L.	Low
Product	pom	name	Mime Detection Utility	High
Product	pom	url	http://www.medsea.eu/mime-util/	Medium
Product	Manifest	url	http://www.medsea.eu/mime-util/	Low
Version	pom	version	2.1.3	Highest
Version	central	version	2.1.3	Highest
Version	file	version	2.1.3	Highest

Identifiers

maven: eu.medsea.mimeutil:mime-util:2.1.3 ✓ Confidence:Highest

jakarta-regexp-1.4.jar

File Path: /home/ciagent/.m2/repository/jakarta-regexp/jakarta-regexp/1.4/jakarta-regexp-1.4.jar
MD5: 5d8b8c601c21b37aa6142d38f45c0297
SHA1: 0ea514a179ac1dd7e81c7e6594468b9b9910d298
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	apache	Low
Vendor	jar	package name	regexp	Low
Vendor	pom	artifactid	jakarta-regexp	Low
Vendor	central	groupid	jakarta-regexp	Highest
Vendor	pom	groupid	jakarta-regexp	Highest
Vendor	file	name	jakarta-regexp	High
Product	pom	artifactid	jakarta-regexp	Highest
Product	central	artifactid	jakarta-regexp	Highest
Product	pom	groupid	jakarta-regexp	Low
Product	jar	package name	regexp	Low
Product	file	name	jakarta-regexp	High
Version	pom	version	1.4	Highest
Version	file	version	1.4	Highest
Version	central	version	1.4	Highest

Identifiers

maven: jakarta-regexp:jakarta-regexp:1.4 ✓ Confidence:Highest

xpp3-1.1.6.jar

Description: XML Pull parser library developed by Extreme Computing Lab, Indiana University

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/ciagent/.m2/repository/org/ogce/xpp3/1.1.6/xpp3-1.1.6.jar
MD5: 626a429318310e92e3466151e050bdc5
SHA1: dc87e00ddb69341b46a3eb1c331c6fcebf6c8546
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	org.ogce	Highest
Vendor	pom	name	XPP3	High
Vendor	pom	url	http://www.extreme.indiana.edu/xpp/	Highest
Vendor	file	name	xpp3	High
Vendor	pom	description	XML Pull parser library developed by Extreme Computing Lab, Indiana University	Medium
Vendor	jar	package name	builder	Low
Vendor	jar	package name	v1	Low
Vendor	pom	artifactid	xpp3	Low
Vendor	central	groupid	org.ogce	Highest
Vendor	pom	groupid	ogce	Highest
Vendor	jar	package name	xmlpull	Low
Product	pom	name	XPP3	High
Product	file	name	xpp3	High
Product	pom	url	http://www.extreme.indiana.edu/xpp/	Medium
Product	pom	description	XML Pull parser library developed by Extreme Computing Lab, Indiana University	Medium
Product	pom	artifactid	xpp3	Highest
Product	jar	package name	builder	Low
Product	pom	groupid	ogce	Low
Product	jar	package name	v1	Low
Product	jar	package name	xpath	Low
Product	central	artifactid	xpp3	Highest
Version	pom	version	1.1.6	Highest
Version	central	version	1.1.6	Highest
Version	file	version	1.1.6	Highest

Identifiers

maven: org.ogce:xpp3:1.1.6 ✓ Confidence:Highest

jcl-over-slf4j-1.7.18.jar

Description: JCL 1.1.1 implemented over SLF4J

File Path: /home/ciagent/.m2/repository/org/slf4j/jcl-over-slf4j/1.7.18/jcl-over-slf4j-1.7.18.jar
MD5: 86c8f80da62e4640564effb9dff7e003
SHA1: eca71be00af2579564e9f3a23ce0b245ca79ee5d
Referenced In Projects/Scopes:

eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jcl-over-slf4j	High
Vendor	pom	description	JCL 1.1.1 implemented over SLF4J	Medium
Vendor	central	groupid	org.slf4j	Highest
Vendor	pom	name	JCL 1.1.1 implemented over SLF4J	High
Vendor	pom	groupid	org.slf4j	Highest
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	manifest	Bundle-Description	JCL 1.1.1 implemented over SLF4J	Medium
Vendor	pom	artifactid	jcl-over-slf4j	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Vendor	Manifest	bundle-symbolicname	jcl.over.slf4j	Medium
Vendor	pom	parent-groupid	org.slf4j	Medium
Vendor	pom	groupid	slf4j	Highest
Vendor	pom	parent-artifactid	slf4j-parent	Low
Product	file	name	jcl-over-slf4j	High
Product	central	artifactid	jcl-over-slf4j	Highest
Product	pom	groupid	slf4j	Low
Product	pom	description	JCL 1.1.1 implemented over SLF4J	Medium
Product	pom	parent-groupid	org.slf4j	Low
Product	pom	name	JCL 1.1.1 implemented over SLF4J	High
Product	Manifest	Bundle-Name	jcl-over-slf4j	Medium
Product	pom	artifactid	jcl-over-slf4j	Highest
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	Implementation-Title	jcl-over-slf4j	High
Product	manifest	Bundle-Description	JCL 1.1.1 implemented over SLF4J	Medium
Product	Manifest	bundle-symbolicname	jcl.over.slf4j	Medium
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Version	Manifest	Implementation-Version	1.7.18	High
Version	central	version	1.7.18	Highest
Version	pom	version	1.7.18	Highest
Version	file	version	1.7.18	Highest

Identifiers

maven: org.slf4j:jcl-over-slf4j:1.7.18 ✓ Confidence:Highest

slf4j-api-1.7.18.jar

Description: The slf4j API

File Path: /home/ciagent/.m2/repository/org/slf4j/slf4j-api/1.7.18/slf4j-api-1.7.18.jar
MD5: 1b1d1af21206ac5ae44cd79a6c04dd92
SHA1: b631d286463ced7cc42ee2171fe3beaed2836823
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	central	groupid	org.slf4j	Highest
Vendor	manifest	Bundle-Description	The slf4j API	Medium
Vendor	pom	groupid	org.slf4j	Highest
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	pom	artifactid	slf4j-api	Low
Vendor	pom	url	http://www.slf4j.org	Highest
Vendor	pom	parent-groupid	org.slf4j	Medium
Vendor	file	name	slf4j-api	High
Vendor	pom	groupid	slf4j	Highest
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	pom	name	SLF4J API Module	High
Vendor	pom	description	The slf4j API	Medium
Product	pom	groupid	slf4j	Low
Product	Manifest	Implementation-Title	slf4j-api	High
Product	manifest	Bundle-Description	The slf4j API	Medium
Product	pom	parent-groupid	org.slf4j	Low
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	Bundle-Name	slf4j-api	Medium
Product	pom	artifactid	slf4j-api	Highest
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	pom	url	http://www.slf4j.org	Medium
Product	central	artifactid	slf4j-api	Highest
Product	file	name	slf4j-api	High
Product	pom	name	SLF4J API Module	High
Product	pom	description	The slf4j API	Medium
Version	Manifest	Implementation-Version	1.7.18	High
Version	central	version	1.7.18	Highest
Version	pom	version	1.7.18	Highest
Version	file	version	1.7.18	Highest

Identifiers

maven: org.slf4j:slf4j-api:1.7.18 ✓ Confidence:Highest

exo.kernel.commons-5.3.x-SNAPSHOT.jar

Description: Implementation of Commons Utils of Exoplatform SAS 'eXo Kernel' project.

File Path: /home/ciagent/.m2/repository/org/exoplatform/kernel/exo.kernel.commons/5.3.x-SNAPSHOT/exo.kernel.commons-5.3.x-SNAPSHOT.jar
MD5: 2188dd1d113e9806b088c7b36401a018
SHA1: e88ae875c0021e16796801b706a6aa46fdc2603d
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	exoplatform.kernel	Highest
Vendor	file	name	exo.kernel.commons	High
Vendor	Manifest	specification-vendor	eXo Platform SAS	Low
Vendor	pom	groupid	org.exoplatform.kernel	Highest
Vendor	Manifest	Implementation-Vendor	eXo Platform SAS	High
Vendor	pom	artifactid	exo.kernel.commons	Low
Vendor	Manifest	Implementation-Vendor-Id	org.exoplatform.kernel	Medium
Vendor	pom	parent-groupid	org.exoplatform.kernel	Medium
Vendor	pom	name	eXo PLF:: Kernel :: Commons Utils	High
Vendor	pom	description	Implementation of Commons Utils of Exoplatform SAS 'eXo Kernel' project.	Medium
Vendor	pom	parent-artifactid	kernel-parent	Low
Product	pom	parent-groupid	org.exoplatform.kernel	Low
Product	file	name	exo.kernel.commons	High
Product	Manifest	Implementation-Title	eXo PLF:: Kernel :: Commons Utils	High
Product	pom	parent-artifactid	kernel-parent	Medium
Product	Manifest	specification-title	exo-kernel	Medium
Product	pom	groupid	exoplatform.kernel	Low
Product	pom	artifactid	exo.kernel.commons	Highest
Product	pom	name	eXo PLF:: Kernel :: Commons Utils	High
Product	pom	description	Implementation of Commons Utils of Exoplatform SAS 'eXo Kernel' project.	Medium
Version	file	version	5.3	Highest
Version	Manifest	Implementation-Version	5.3.x-SNAPSHOT	High

Identifiers

maven: org.exoplatform.kernel:exo.kernel.commons:5.3.x-SNAPSHOT Confidence:High

javax.servlet-api-3.0.1.jar

Description: Java.net - The Source for Java Technology Collaboration

License:

CDDL + GPLv2 with classpath exception: https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html

File Path: /home/ciagent/.m2/repository/javax/servlet/javax.servlet-api/3.0.1/javax.servlet-api-3.0.1.jar
MD5: 3ef236ac4c24850cd54abff60be25f35
SHA1: 6bf0ebb7efd993e222fc1112377b5e92a13b38dd
Referenced In Projects/Scopes:

eXo PLF:: Integration - Search - Portlet:provided
eXo PLF:: Social - Wiki Activities:provided
eXo PLF:: Social - Document composer:provided
eXo PLF:: Social - View Activities:provided
eXo PLF:: Social - Forum Activities:provided
eXo PLF:: Social - Calendar Activities:provided

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	Java Servlet API	High
Vendor	manifest	Bundle-Description	Java.net - The Source for Java Technology Collaboration	Medium
Vendor	pom	parent-groupid	net.java	Medium
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Vendor	Manifest (hint)	specification-vendor	sun	Low
Vendor	file	name	javax.servlet-api	High
Vendor	Manifest	bundle-symbolicname	javax.servlet-api	Medium
Vendor	pom	groupid	javax.servlet	Highest
Vendor	Manifest	specification-vendor	Oracle	Low
Vendor	Manifest	extension-name	javax.servlet	Medium
Vendor	pom	artifactid	javax.servlet-api	Low
Vendor	pom	organization url	https://glassfish.dev.java.net	Medium
Vendor	Manifest	Implementation-Vendor	GlassFish Community	High
Vendor	pom	parent-artifactid	jvnet-parent	Low
Vendor	central	groupid	javax.servlet	Highest
Vendor	pom	organization name	GlassFish Community	High
Vendor	pom	url	http://servlet-spec.java.net	Highest
Vendor	Manifest	bundle-docurl	https://glassfish.dev.java.net	Low
Product	pom	name	Java Servlet API	High
Product	manifest	Bundle-Description	Java.net - The Source for Java Technology Collaboration	Medium
Product	pom	artifactid	javax.servlet-api	Highest
Product	pom	organization name	GlassFish Community	Low
Product	Manifest	Bundle-Name	Java Servlet API	Medium
Product	pom	groupid	javax.servlet	Low
Product	file	name	javax.servlet-api	High
Product	Manifest	bundle-symbolicname	javax.servlet-api	Medium
Product	Manifest	specification-title	Java(TM) Servlet API Design Specification	Medium
Product	Manifest	extension-name	javax.servlet	Medium
Product	pom	url	http://servlet-spec.java.net	Medium
Product	pom	parent-artifactid	jvnet-parent	Medium
Product	central	artifactid	javax.servlet-api	Highest
Product	pom	organization url	https://glassfish.dev.java.net	Low
Product	Manifest	bundle-docurl	https://glassfish.dev.java.net	Low
Product	pom	parent-groupid	net.java	Low
Version	file	version	3.0.1	Highest
Version	central	version	3.0.1	Highest
Version	pom	version	3.0.1	Highest
Version	Manifest	Implementation-Version	3.0.1	High

Identifiers

maven: javax.servlet:javax.servlet-api:3.0.1 ✓ Confidence:Highest

commons-beanutils-1.8.3.jar

Description: BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/ciagent/.m2/repository/commons-beanutils/commons-beanutils/1.8.3/commons-beanutils-1.8.3.jar
MD5: b45be74134796c89db7126083129532f
SHA1: 686ef3410bcf4ab8ce7fd0b899e832aaba5facf7
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	Commons BeanUtils	High
Vendor	file	name	commons-beanutils	High
Vendor	pom	description	BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.	Medium
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	Manifest	bundle-symbolicname	org.apache.commons.beanutils	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	groupid	commons-beanutils	Highest
Vendor	central	groupid	commons-beanutils	Highest
Vendor	pom	artifactid	commons-beanutils	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	manifest	Bundle-Description	BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.	Medium
Vendor	pom	url	http://commons.apache.org/beanutils/	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	bundle-docurl	http://commons.apache.org/beanutils/	Low
Product	pom	url	http://commons.apache.org/beanutils/	Medium
Product	pom	name	Commons BeanUtils	High
Product	file	name	commons-beanutils	High
Product	pom	description	BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.beanutils	Medium
Product	Manifest	Bundle-Name	Commons BeanUtils	Medium
Product	Manifest	specification-title	Commons BeanUtils	Medium
Product	pom	groupid	commons-beanutils	Low
Product	pom	parent-groupid	org.apache.commons	Low
Product	pom	artifactid	commons-beanutils	Highest
Product	manifest	Bundle-Description	BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection.	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	central	artifactid	commons-beanutils	Highest
Product	Manifest	bundle-docurl	http://commons.apache.org/beanutils/	Low
Product	Manifest	Implementation-Title	Commons BeanUtils	High
Version	file	version	1.8.3	Highest
Version	central	version	1.8.3	Highest
Version	pom	version	1.8.3	Highest
Version	Manifest	Implementation-Version	1.8.3	High

Identifiers

maven: commons-beanutils:commons-beanutils:1.8.3 ✓ Confidence:Highest
cpe: cpe:/a:apache:commons_beanutils:1.8.3 Confidence:Low

Published Vulnerabilities

CVE-2014-0114

Severity: High
CVSS Score: 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P)
CWE: CWE-20 Improper Input Validation

Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via the class parameter, as demonstrated by the passing of this parameter to the getClass method of the ActionForm object in Struts 1.

BID - 67121
BUGTRAQ - 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities
CONFIRM - http://advisories.mageia.org/MGASA-2014-0219.html
CONFIRM - http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt
CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21674128
CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21674812
CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21675266
CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21675387
CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21675689
CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21675898
CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21675972
CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21676091
CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21676110
CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21676303
CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21676375
CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21676931
CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg21677110
CONFIRM - http://www-01.ibm.com/support/docview.wss?uid=swg27042296
CONFIRM - http://www.ibm.com/support/docview.wss?uid=swg21675496
CONFIRM - http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html
CONFIRM - http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
CONFIRM - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
CONFIRM - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
CONFIRM - http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
CONFIRM - http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
CONFIRM - http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
CONFIRM - http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
CONFIRM - http://www.vmware.com/security/advisories/VMSA-2014-0008.html
CONFIRM - http://www.vmware.com/security/advisories/VMSA-2014-0012.html
CONFIRM - https://access.redhat.com/solutions/869353
CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=1091938
CONFIRM - https://bugzilla.redhat.com/show_bug.cgi?id=1116665
CONFIRM - https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05324755
CONFIRM - https://issues.apache.org/jira/browse/BEANUTILS-463
CONFIRM - https://security.netapp.com/advisory/ntap-20140911-0001/
CONFIRM - https://security.netapp.com/advisory/ntap-20180629-0006/
CONFIRM - https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
DEBIAN - DSA-2940
FEDORA - FEDORA-2014-9380
FULLDISC - 20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities
GENTOO - GLSA-201607-09
HP - HPSBGN03041
HP - HPSBMU03090
HP - HPSBST03160
MANDRIVA - MDVSA-2014:095
MISC - https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
MLIST - [apache-ignite-developers] 20180601 [CVE-2014-0114]: Apache Ignite is vulnerable to existing CVE-2014-0114
MLIST - [infra-devnull] 20190329 [GitHub] [pulsar] massakam opened pull request #3938: Upgrade third party libraries with security vulnerabilities
MLIST - [oss-security] 20140616 CVE request for commons-beanutils: 'class' property is exposed, potentially leading to RCE
MLIST - [oss-security] 20140707 Re: CVE request for commons-beanutils: 'class' property is exposed, potentially leading to RCE
MLIST - [pulsar-commits] 20190329 [GitHub] [pulsar] massakam opened a new pull request #3938: Upgrade third party libraries with security vulnerabilities
REDHAT - RHSA-2018:2669
SECUNIA - 57477
SECUNIA - 58710
SECUNIA - 58947
SECUNIA - 59118
SECUNIA - 59228
SECUNIA - 59245
SECUNIA - 59246
SECUNIA - 59430
SECUNIA - 59464
SECUNIA - 59479
SECUNIA - 59480
SECUNIA - 59718

Vulnerable Software & Versions: (show all)

cpe:/a:apache:commons_beanutils:1.9.1 and all previous versions
...
cpe:/a:apache:commons_beanutils:1.9.1 and all previous versions
cpe:/a:apache:struts:1.0
cpe:/a:apache:struts:1.0.2
cpe:/a:apache:struts:1.1
cpe:/a:apache:struts:1.1:b1
cpe:/a:apache:struts:1.1:b2
cpe:/a:apache:struts:1.1:b3
cpe:/a:apache:struts:1.1:rc1
cpe:/a:apache:struts:1.1:rc2
cpe:/a:apache:struts:1.2.2
cpe:/a:apache:struts:1.2.4
cpe:/a:apache:struts:1.2.6
cpe:/a:apache:struts:1.2.7
cpe:/a:apache:struts:1.2.8
cpe:/a:apache:struts:1.2.9
cpe:/a:apache:struts:1.3.5
cpe:/a:apache:struts:1.3.8
cpe:/a:apache:struts:1.3.10

jibx-run-1.2.6.jar

Description: JiBX runtime code

License:

http://jibx.sourceforge.net/jibx-license.html

File Path: /home/ciagent/.m2/repository/org/jibx/jibx-run/1.2.6/jibx-run-1.2.6.jar
MD5: 4ef53e4279c8440aff2d16c0af024231
SHA1: 544f3ac7887d7eed20ca0420ee1963df6c7ecebb
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jibx-run	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))"	Low
Vendor	pom	parent-artifactid	main-reactor	Low
Vendor	Manifest	bundle-symbolicname	jibx-run	Medium
Vendor	pom	description	JiBX runtime code	Medium
Vendor	pom	name	jibx-run - JiBX runtime	High
Vendor	pom	artifactid	jibx-run	Low
Vendor	Manifest	bundle-docurl	http://www.jibx.org	Low
Vendor	pom	parent-groupid	org.jibx.config	Medium
Vendor	pom	groupid	jibx	Highest
Vendor	manifest	Bundle-Description	JiBX runtime code	Medium
Vendor	pom	groupid	org.jibx	Highest
Vendor	central	groupid	org.jibx	Highest
Product	file	name	jibx-run	High
Product	central	artifactid	jibx-run	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))"	Low
Product	Manifest	bundle-symbolicname	jibx-run	Medium
Product	pom	artifactid	jibx-run	Highest
Product	pom	description	JiBX runtime code	Medium
Product	pom	name	jibx-run - JiBX runtime	High
Product	Manifest	bundle-docurl	http://www.jibx.org	Low
Product	pom	parent-groupid	org.jibx.config	Low
Product	pom	parent-artifactid	main-reactor	Medium
Product	manifest	Bundle-Description	JiBX runtime code	Medium
Product	Manifest	Bundle-Name	jibx-run - JiBX runtime	Medium
Product	pom	groupid	jibx	Low
Version	central	version	1.2.6	Highest
Version	pom	version	1.2.6	Highest
Version	file	version	1.2.6	Highest

Identifiers

maven: org.jibx:jibx-run:1.2.6 ✓ Confidence:Highest

cdi-api-1.0-SP4.jar

Description: APIs for JSR-299: Contexts and Dependency Injection for Java EE

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.html

File Path: /home/ciagent/.m2/repository/javax/enterprise/cdi-api/1.0-SP4/cdi-api-1.0-SP4.jar
MD5: 6c1e2b4036d64b6ba1a1136a00c7cdaa
SHA1: 6e38490033eb8b36c4cf1f7605163424a574dcf0
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	cdi-api	High
Vendor	Manifest	specification-vendor	Seam Framework	Low
Vendor	pom	name	CDI APIs	High
Vendor	pom	description	APIs for JSR-299: Contexts and Dependency Injection for Java EE	Medium
Vendor	pom	parent-artifactid	weld-parent	Low
Vendor	pom	parent-groupid	org.jboss.weld	Medium
Vendor	pom	artifactid	cdi-api	Low
Vendor	Manifest	implementation-url	http://www.seamframework.org/Weld	Low
Vendor	pom	organization name	Seam Framework	High
Vendor	central	groupid	javax.enterprise	Highest
Vendor	pom	organization url	http://seamframework.org	Medium
Vendor	pom	groupid	javax.enterprise	Highest
Vendor	Manifest	Implementation-Vendor	Seam Framework	High
Vendor	pom	url	http://www.seamframework.org/Weld	Highest
Product	central	artifactid	cdi-api	Highest
Product	pom	artifactid	cdi-api	Highest
Product	pom	organization url	http://seamframework.org	Low
Product	file	name	cdi-api	High
Product	pom	groupid	javax.enterprise	Low
Product	Manifest	specification-title	CDI APIs	Medium
Product	pom	url	http://www.seamframework.org/Weld	Medium
Product	pom	name	CDI APIs	High
Product	pom	description	APIs for JSR-299: Contexts and Dependency Injection for Java EE	Medium
Product	pom	parent-artifactid	weld-parent	Medium
Product	pom	organization name	Seam Framework	Low
Product	Manifest	Implementation-Title	CDI APIs	High
Product	pom	parent-groupid	org.jboss.weld	Low
Product	Manifest	implementation-url	http://www.seamframework.org/Weld	Low
Version	pom	version	1.0-SP4	Highest
Version	file	version	1.0.sp4	Highest
Version	central	version	1.0-SP4	Highest

Identifiers

maven: javax.enterprise:cdi-api:1.0-SP4 ✓ Confidence:Highest

exo.kernel.container-5.3.x-SNAPSHOT.jar

Description: Implementation of Container for Exoplatform SAS 'eXo Kernel' project.

File Path: /home/ciagent/.m2/repository/org/exoplatform/kernel/exo.kernel.container/5.3.x-SNAPSHOT/exo.kernel.container-5.3.x-SNAPSHOT.jar
MD5: 5a76b024320e8ac86ffbdb45d862ee1e
SHA1: 6b4a1757c5bdd104fb59099b76e73c87475ff108
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	exoplatform.kernel	Highest
Vendor	Manifest	specification-vendor	eXo Platform SAS	Low
Vendor	pom	groupid	org.exoplatform.kernel	Highest
Vendor	Manifest	Implementation-Vendor	eXo Platform SAS	High
Vendor	pom	name	eXo PLF:: Kernel :: Container	High
Vendor	Manifest	Implementation-Vendor-Id	org.exoplatform.kernel	Medium
Vendor	pom	artifactid	exo.kernel.container	Low
Vendor	file	name	exo.kernel.container	High
Vendor	pom	parent-groupid	org.exoplatform.kernel	Medium
Vendor	pom	parent-artifactid	kernel-parent	Low
Vendor	pom	description	Implementation of Container for Exoplatform SAS 'eXo Kernel' project.	Medium
Product	pom	parent-groupid	org.exoplatform.kernel	Low
Product	pom	parent-artifactid	kernel-parent	Medium
Product	pom	name	eXo PLF:: Kernel :: Container	High
Product	Manifest	specification-title	exo-kernel	Medium
Product	pom	groupid	exoplatform.kernel	Low
Product	file	name	exo.kernel.container	High
Product	Manifest	Implementation-Title	eXo PLF:: Kernel :: Container	High
Product	pom	artifactid	exo.kernel.container	Highest
Product	pom	description	Implementation of Container for Exoplatform SAS 'eXo Kernel' project.	Medium
Version	file	version	5.3	Highest
Version	Manifest	Implementation-Version	5.3.x-SNAPSHOT	High

Identifiers

maven: org.exoplatform.kernel:exo.kernel.container:5.3.x-SNAPSHOT Confidence:High

exo.portal.webui.core-5.3.x-SNAPSHOT.jar

File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.webui.core/5.3.x-SNAPSHOT/exo.portal.webui.core-5.3.x-SNAPSHOT.jar
MD5: 0f5c13fbb198bb5ac9865d3cb9b3cd2b
SHA1: a100068ccc4b31ae62ef5bc0dc9aeccc7aa8502c
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	JBoss by Red Hat	Low
Vendor	Manifest	Implementation-Vendor	JBoss by Red Hat	High
Vendor	Manifest	implementation-url	www.gatein.org/exo.portal.parent/exo.portal.webui/exo.portal.webui.core/	Low
Vendor	pom	groupid	org.exoplatform.gatein.portal	Highest
Vendor	file	name	exo.portal.webui.core	High
Vendor	pom	artifactid	exo.portal.webui.core	Low
Vendor	pom	parent-groupid	org.exoplatform.gatein.portal	Medium
Vendor	Manifest	os-name	Linux	Medium
Vendor	Manifest	Implementation-Vendor-Id	org.exoplatform.gatein.portal	Medium
Vendor	Manifest	java-vendor	Oracle Corporation	Medium
Vendor	pom	parent-artifactid	exo.portal.webui	Low
Vendor	Manifest	build-timestamp	Fri, 10 May 2019 09:57:29 +0000	Low
Vendor	pom	name	GateIn Portal WebUI Core	High
Vendor	pom	groupid	exoplatform.gatein.portal	Highest
Product	pom	groupid	exoplatform.gatein.portal	Low
Product	pom	parent-artifactid	exo.portal.webui	Medium
Product	Manifest	build-timestamp	Fri, 10 May 2019 09:57:29 +0000	Low
Product	pom	name	GateIn Portal WebUI Core	High
Product	Manifest	Implementation-Title	GateIn Portal WebUI Core	High
Product	Manifest	implementation-url	www.gatein.org/exo.portal.parent/exo.portal.webui/exo.portal.webui.core/	Low
Product	pom	parent-groupid	org.exoplatform.gatein.portal	Low
Product	file	name	exo.portal.webui.core	High
Product	Manifest	specification-title	GateIn Portal WebUI Core	Medium
Product	Manifest	os-name	Linux	Medium
Product	pom	artifactid	exo.portal.webui.core	Highest
Version	file	version	5.3	Highest
Version	Manifest	Implementation-Version	5.3.x-SNAPSHOT	High

Related Dependencies

exo.portal.component.identity-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.component.identity/5.3.x-SNAPSHOT/exo.portal.component.identity-5.3.x-SNAPSHOT.jar
- SHA1: e8a4eb2e112ff03b574165b80f972d47a90ad357
- MD5: 451778342c5abbe82f6beb250763fed8
exo.portal.component.portal-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.component.portal/5.3.x-SNAPSHOT/exo.portal.component.portal-5.3.x-SNAPSHOT.jar
- SHA1: 7a6e9fbc6a237bc36895f6a228adb8d1d9474b8d
- MD5: 691f93dc60bcb2f146f7c4d12461abf8
exo.portal.webui.eXo-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.webui.eXo/5.3.x-SNAPSHOT/exo.portal.webui.eXo-5.3.x-SNAPSHOT.jar
- SHA1: ce057e2f2d872254eea9d0613d30bdf9ac26a7cc
- MD5: 844010303d51bc09168e2d6fe5adf0fd
exo.portal.component.api-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.component.api/5.3.x-SNAPSHOT/exo.portal.component.api-5.3.x-SNAPSHOT.jar
- SHA1: ebe9a75a0aaa644f96dbda70fcfae2a0f12b9d7f
- MD5: 087db84f7fe23d504782ef0fb845c152
exo.portal.component.web.api-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.component.web.api/5.3.x-SNAPSHOT/exo.portal.component.web.api-5.3.x-SNAPSHOT.jar
- SHA1: 20176d259c9d1a08b3588b3143820adb4edb1aa8
- MD5: d45212a374e53fcac7b71d0a620a73a2
exo.portal.component.web.oauth-common-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.component.web.oauth-common/5.3.x-SNAPSHOT/exo.portal.component.web.oauth-common-5.3.x-SNAPSHOT.jar
- SHA1: ec050d3f5cf7e7687a69f6106a7ab6402f33a3d5
- MD5: fe46f2f21bd65c2941ecb22ffb0ed451
exo.portal.gadgets-core-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.gadgets-core/5.3.x-SNAPSHOT/exo.portal.gadgets-core-5.3.x-SNAPSHOT.jar
- SHA1: ddfaca683d60f5a49e50bc8e7385ab1a9037d564
- MD5: b8bfcfc78d379b3c3efa97ee08182fb5
exo.portal.component.common-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.component.common/5.3.x-SNAPSHOT/exo.portal.component.common-5.3.x-SNAPSHOT.jar
- SHA1: 08456e97536ed72ab461ad9268f41d43d24dd372
- MD5: c398036ee5529cd3548350b636504bde
exo.portal.component.web.resources-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.component.web.resources/5.3.x-SNAPSHOT/exo.portal.component.web.resources-5.3.x-SNAPSHOT.jar
- SHA1: 21bb8eb440c1cd9d4572c389dd890bdb14102ae8
- MD5: d6a7a8d142cca34b3fb1eb0db5a00b2f
exo.portal.webui.portlet-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.webui.portlet/5.3.x-SNAPSHOT/exo.portal.webui.portlet-5.3.x-SNAPSHOT.jar
- SHA1: fd019d8c29be2a05b720d8109c5e566a974d56a3
- MD5: a01cabcc364264dcdad5d018b32689b1
exo.portal.component.scripting-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.component.scripting/5.3.x-SNAPSHOT/exo.portal.component.scripting-5.3.x-SNAPSHOT.jar
- SHA1: 00a88b47db4d73af7705c79419a721e5fa55663d
- MD5: aca2fa9b9c088bfd6547025b842553af
exo.portal.component.application-registry-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.component.application-registry/5.3.x-SNAPSHOT/exo.portal.component.application-registry-5.3.x-SNAPSHOT.jar
- SHA1: feae7daca4a1fbe30fc07605f073f4d599a86256
- MD5: f5d47983c78b2af797036214e2934bdd
exo.portal.webui.framework-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.webui.framework/5.3.x-SNAPSHOT/exo.portal.webui.framework-5.3.x-SNAPSHOT.jar
- SHA1: cc1abb1102e13ad0c3518f470fe4a05c6b07d1e0
- MD5: bfd0289410bbe8891c34d3a22f0e0074
exo.portal.component.pc-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.component.pc/5.3.x-SNAPSHOT/exo.portal.component.pc-5.3.x-SNAPSHOT.jar
- SHA1: 5713ec1c610a31d46d361369ddd4526c66769035
- MD5: 586b3ba287418c315b4a6bdad2975a72
exo.portal.webui.portal-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.webui.portal/5.3.x-SNAPSHOT/exo.portal.webui.portal-5.3.x-SNAPSHOT.jar
- SHA1: 050d46ebd694a51457f896b5478d2bd1b2c2843b
- MD5: 2c6b71a135097447406a15d1ae914d1c

Identifiers

maven: org.exoplatform.gatein.portal:exo.portal.webui.core:5.3.x-SNAPSHOT Confidence:High
cpe: cpe:/a:in-portal:in-portal:5.3 Confidence:Low

exo.portal.component.resources-5.3.x-SNAPSHOT.jar

Description: Internationalization and localization resources

File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.component.resources/5.3.x-SNAPSHOT/exo.portal.component.resources-5.3.x-SNAPSHOT.jar
MD5: c4466f4084ad072b137cd77455af8908
SHA1: 74f8bda990ad354ddb92a59f5311d2d2e9f16c95
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:runtime
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	exo.portal.component.resources	High
Vendor	Manifest	specification-vendor	JBoss by Red Hat	Low
Vendor	Manifest	Implementation-Vendor	JBoss by Red Hat	High
Vendor	pom	groupid	org.exoplatform.gatein.portal	Highest
Vendor	pom	parent-groupid	org.exoplatform.gatein.portal	Medium
Vendor	Manifest	os-name	Linux	Medium
Vendor	Manifest	Implementation-Vendor-Id	org.exoplatform.gatein.portal	Medium
Vendor	pom	name	GateIn Portal Component Resources	High
Vendor	pom	description	Internationalization and localization resources	Medium
Vendor	Manifest	java-vendor	Oracle Corporation	Medium
Vendor	pom	parent-artifactid	exo.portal.component	Low
Vendor	pom	artifactid	exo.portal.component.resources	Low
Vendor	Manifest	build-timestamp	Fri, 10 May 2019 09:57:29 +0000	Low
Vendor	pom	groupid	exoplatform.gatein.portal	Highest
Vendor	Manifest	implementation-url	www.gatein.org/exo.portal.parent/exo.portal.component/exo.portal.component.resources/	Low
Product	Manifest	Implementation-Title	GateIn Portal Component Resources	High
Product	file	name	exo.portal.component.resources	High
Product	pom	parent-groupid	org.exoplatform.gatein.portal	Low
Product	pom	artifactid	exo.portal.component.resources	Highest
Product	Manifest	os-name	Linux	Medium
Product	pom	name	GateIn Portal Component Resources	High
Product	pom	description	Internationalization and localization resources	Medium
Product	pom	parent-artifactid	exo.portal.component	Medium
Product	pom	groupid	exoplatform.gatein.portal	Low
Product	Manifest	build-timestamp	Fri, 10 May 2019 09:57:29 +0000	Low
Product	Manifest	specification-title	GateIn Portal Component Resources	Medium
Product	Manifest	implementation-url	www.gatein.org/exo.portal.parent/exo.portal.component/exo.portal.component.resources/	Low
Version	pom	version	5.3.x-20190510.095819-19	Highest
Version	file	version	5.3	Highest
Version	pom	version	5.3.x-SNAPSHOT	Highest
Version	Manifest	Implementation-Version	5.3.x-SNAPSHOT	High

Related Dependencies

exo.portal.component.web.server-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.component.web.server/5.3.x-SNAPSHOT/exo.portal.component.web.server-5.3.x-SNAPSHOT.jar
- SHA1: 10086a2794198b651d5bcd6e12a38502ed4c84fc
- MD5: 35437a995c154618c2b88d40b29518ef
exo.portal.component.web.security-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.component.web.security/5.3.x-SNAPSHOT/exo.portal.component.web.security-5.3.x-SNAPSHOT.jar
- SHA1: 8135100999c0714a6d9a737ec714b75ee3e338fe
- MD5: 326f0acb2561f36cf05eef0fdf6e105e
exo.portal.component.web.controller-5.3.x-SNAPSHOT.jar
- File Path: /home/ciagent/.m2/repository/org/exoplatform/gatein/portal/exo.portal.component.web.controller/5.3.x-SNAPSHOT/exo.portal.component.web.controller-5.3.x-SNAPSHOT.jar
- SHA1: 932006b1260bfc62ad16baee91fd03964cddf0e1
- MD5: 68d994436ac4047a592af0771a874791

Identifiers

cpe: cpe:/a:in-portal:in-portal:5.3.20190510 Confidence:Low
maven: org.exoplatform.gatein.portal:exo.portal.component.resources:5.3.x-SNAPSHOT Confidence:High

staxnav.core-0.9.8.jar

File Path: /home/ciagent/.m2/repository/org/staxnav/staxnav.core/0.9.8/staxnav.core-0.9.8.jar
MD5: 0f786e5be21df9fbe8753175564564c7
SHA1: 27bd12d4d74b0851e38de79f8299462d93ba3d7f
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	org.staxnav	Highest
Vendor	file	name	staxnav.core	High
Vendor	pom	name	Staxnav - Core	High
Vendor	pom	groupid	staxnav	Highest
Vendor	pom	artifactid	staxnav.core	Low
Vendor	pom	parent-artifactid	staxnav.parent	Low
Vendor	jar	package name	staxnav	Low
Vendor	pom	parent-groupid	org.staxnav	Medium
Vendor	central	groupid	org.staxnav	Highest
Product	file	name	staxnav.core	High
Product	central	artifactid	staxnav.core	Highest
Product	pom	parent-groupid	org.staxnav	Low
Product	pom	parent-artifactid	staxnav.parent	Medium
Product	pom	name	Staxnav - Core	High
Product	pom	artifactid	staxnav.core	Highest
Product	pom	groupid	staxnav	Low
Version	central	version	0.9.8	Highest
Version	pom	version	0.9.8	Highest
Version	file	version	0.9.8	Highest

Identifiers

maven: org.staxnav:staxnav.core:0.9.8 ✓ Confidence:Highest

closure-compiler-externs-v20170910.jar

File Path: /home/ciagent/.m2/repository/com/google/javascript/closure-compiler-externs/v20170910/closure-compiler-externs-v20170910.jar
MD5: 573e49fb83760d25b675028eb612e2b2
SHA1: 036e801a929fcd121d212093923daf34986f5572
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	closure-compiler-externs	Low
Vendor	file	name	closure-compiler-externs-v20170910	High
Vendor	pom	groupid	com.google.javascript	Highest
Vendor	pom	groupid	google.javascript	Highest
Vendor	pom	parent-artifactid	closure-compiler-parent	Low
Vendor	pom	parent-groupid	com.google.javascript	Medium
Vendor	pom	name	Closure Compiler Externs	High
Vendor	central	groupid	com.google.javascript	Highest
Product	pom	groupid	google.javascript	Low
Product	file	name	closure-compiler-externs-v20170910	High
Product	pom	parent-artifactid	closure-compiler-parent	Medium
Product	pom	artifactid	closure-compiler-externs	Highest
Product	pom	parent-groupid	com.google.javascript	Low
Product	central	artifactid	closure-compiler-externs	Highest
Product	pom	name	Closure Compiler Externs	High
Version	central	version	v20170910	Highest
Version	pom	version	v20170910	Highest
Version	file	name	closure-compiler-externs-v20170910	Medium
Version	file	version	20170910	Medium

Identifiers

maven: com.google.javascript:closure-compiler-externs:v20170910 ✓ Confidence:Highest

args4j-2.33.jar

Description: args4j : Java command line arguments parser

License:

http://www.opensource.org/licenses/mit-license.php

File Path: /home/ciagent/.m2/repository/args4j/args4j/2.33/args4j-2.33.jar
MD5: 0a6d515f76b15d29e3cd529de9319739
SHA1: bd87a75374a6d6523de82fef51fc3cfe9baf9fc9
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	central	groupid	args4j	Highest
Vendor	pom	artifactid	args4j	Low
Vendor	pom	parent-artifactid	args4j-site	Low
Vendor	file	name	args4j	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))"	Low
Vendor	pom	groupid	args4j	Highest
Vendor	manifest	Bundle-Description	args4j : Java command line arguments parser	Medium
Vendor	Manifest	bundle-docurl	http://www.kohsuke.org/	Low
Vendor	Manifest	bundle-symbolicname	org.kohsuke.args4j	Medium
Vendor	pom	name	args4j	High
Product	pom	parent-artifactid	args4j-site	Medium
Product	Manifest	Bundle-Name	args4j	Medium
Product	file	name	args4j	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))"	Low
Product	manifest	Bundle-Description	args4j : Java command line arguments parser	Medium
Product	Manifest	bundle-docurl	http://www.kohsuke.org/	Low
Product	central	artifactid	args4j	Highest
Product	pom	artifactid	args4j	Highest
Product	Manifest	bundle-symbolicname	org.kohsuke.args4j	Medium
Product	pom	groupid	args4j	Low
Product	pom	name	args4j	High
Version	pom	version	2.33	Highest
Version	file	version	2.33	Highest
Version	central	version	2.33	Highest

Identifiers

maven: args4j:args4j:2.33 ✓ Confidence:Highest

error_prone_annotations-2.0.18.jar

File Path: /home/ciagent/.m2/repository/com/google/errorprone/error_prone_annotations/2.0.18/error_prone_annotations-2.0.18.jar
MD5: 98051758c08c9b7111b3268655069432
SHA1: 5f65affce1684999e2f4024983835efc3504012e
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	error-prone annotations	High
Vendor	pom	parent-artifactid	error_prone_parent	Low
Vendor	central	groupid	com.google.errorprone	Highest
Vendor	pom	groupid	google.errorprone	Highest
Vendor	pom	parent-groupid	com.google.errorprone	Medium
Vendor	file	name	error_prone_annotations	High
Vendor	jar	package name	google	Low
Vendor	jar	package name	annotations	Low
Vendor	pom	groupid	com.google.errorprone	Highest
Vendor	pom	artifactid	error_prone_annotations	Low
Vendor	jar	package name	errorprone	Low
Product	pom	name	error-prone annotations	High
Product	pom	groupid	google.errorprone	Low
Product	pom	artifactid	error_prone_annotations	Highest
Product	pom	parent-artifactid	error_prone_parent	Medium
Product	pom	parent-groupid	com.google.errorprone	Low
Product	file	name	error_prone_annotations	High
Product	central	artifactid	error_prone_annotations	Highest
Product	jar	package name	annotations	Low
Product	jar	package name	errorprone	Low
Version	pom	version	2.0.18	Highest
Version	central	version	2.0.18	Highest
Version	file	version	2.0.18	Highest

Identifiers

maven: com.google.errorprone:error_prone_annotations:2.0.18 ✓ Confidence:Highest

gson-2.7.jar

Description: Gson JSON library

File Path: /home/ciagent/.m2/repository/com/google/code/gson/gson/2.7/gson-2.7.jar
MD5: 5134a2350f58890ffb9db0b40047195d
SHA1: 751f548c85fa49f330cecbb1875893f971b33c4e
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	manifest	Bundle-Description	Gson JSON library	Medium
Vendor	pom	groupid	com.google.code.gson	Highest
Vendor	pom	groupid	google.code.gson	Highest
Vendor	pom	parent-artifactid	gson-parent	Low
Vendor	Manifest	bundle-symbolicname	com.google.gson	Medium
Vendor	Manifest	bundle-contactaddress	https://github.com/google/gson	Low
Vendor	central	groupid	org.netbeans.external	High
Vendor	pom	parent-groupid	com.google.code.gson	Medium
Vendor	pom	name	Gson	High
Vendor	central	groupid	com.google.code.gson	High
Vendor	pom	artifactid	gson	Low
Vendor	file	name	gson	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8	Low
Product	pom	parent-groupid	com.google.code.gson	Low
Product	manifest	Bundle-Description	Gson JSON library	Medium
Product	central	artifactid	gson	High
Product	Manifest	bundle-symbolicname	com.google.gson	Medium
Product	Manifest	bundle-contactaddress	https://github.com/google/gson	Low
Product	pom	name	Gson	High
Product	Manifest	Bundle-Name	Gson	Medium
Product	pom	artifactid	gson	Highest
Product	file	name	gson	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	pom	groupid	google.code.gson	Low
Product	central	artifactid	com-google-gson	High
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5, JavaSE-1.6, JavaSE-1.7, JavaSE-1.8	Low
Product	pom	parent-artifactid	gson-parent	Medium
Version	pom	version	2.7	Highest
Version	file	name	gson	Medium
Version	Manifest	Bundle-Version	2.7.0	High
Version	central	version	2.7	High
Version	central	version	RELEASE110	High
Version	central	version	RELEASE100	High
Version	file	version	2.7	Highest

Identifiers

maven: com.google.code.gson:gson:2.7 ✓ Confidence:Highest
maven: org.netbeans.external:com-google-gson:RELEASE110 ✓ Confidence:Highest
maven: org.netbeans.external:com-google-gson:RELEASE100 ✓ Confidence:Highest

jsinterop-annotations-1.0.0.jar

File Path: /home/ciagent/.m2/repository/com/google/jsinterop/jsinterop-annotations/1.0.0/jsinterop-annotations-1.0.0.jar
MD5: 93302e3d0cc146097ecd08039dc1de52
SHA1: 23c3a3c060ffe4817e67673cc8294e154b0a4a95
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	com.google.jsinterop	Highest
Vendor	jar	package name	jsinterop	Low
Vendor	file	name	jsinterop-annotations	High
Vendor	pom	parent-artifactid	jsinterop	Low
Vendor	pom	groupid	google.jsinterop	Highest
Vendor	pom	artifactid	jsinterop-annotations	Low
Vendor	central	groupid	com.google.jsinterop	Highest
Vendor	pom	parent-groupid	com.google.jsinterop	Medium
Vendor	jar	package name	annotations	Low
Product	pom	parent-groupid	com.google.jsinterop	Low
Product	central	artifactid	jsinterop-annotations	Highest
Product	file	name	jsinterop-annotations	High
Product	pom	artifactid	jsinterop-annotations	Highest
Product	pom	parent-artifactid	jsinterop	Medium
Product	pom	groupid	google.jsinterop	Low
Product	jar	package name	annotations	Low
Version	pom	version	1.0.0	Highest
Version	file	version	1.0.0	Highest
Version	central	version	1.0.0	Highest

Identifiers

maven: com.google.jsinterop:jsinterop-annotations:1.0.0 ✓ Confidence:Highest

closure-compiler-v20170910.jar

File Path: /home/ciagent/.m2/repository/com/google/javascript/closure-compiler/v20170910/closure-compiler-v20170910.jar
MD5: ca8e9f88ba9aad9c5e2c0f8f937fe869
SHA1: 3b87499e9ed3f068e69889182ab95cff92de0932
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	closure-compiler-v20170910	High
Vendor	jar	package name	javascript	Low
Vendor	pom	groupid	com.google.javascript	Highest
Vendor	jar	package name	google	Low
Vendor	central	groupid	com.google.javascript	Highest
Product	pom	artifactid	closure-compiler	Highest
Product	file	name	closure-compiler-v20170910	High
Product	jar	package name	javascript	Low
Product	central	artifactid	closure-compiler	Highest
Version	central	version	v20170910	Highest
Version	pom	version	v20170910	Highest
Version	file	version	20170910	Medium
Version	file	name	closure-compiler-v20170910	Medium

Identifiers

maven: com.google.javascript:closure-compiler:v20170910 ✓ Confidence:Highest

twitter4j-core-3.0.5.jar

Description: A Java library for the Twitter API

License:

Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0

File Path: /home/ciagent/.m2/repository/org/twitter4j/twitter4j-core/3.0.5/twitter4j-core-3.0.5.jar
MD5: e6c8d2b10c621b2bbd7809bad9cedca3
SHA1: c38ad47bc8ba5991886ce2c0e0acd76d0fdd6e6d
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	twitter4j-core	High
Vendor	pom	groupid	twitter4j	Highest
Vendor	pom	name	twitter4j-core	High
Vendor	central	groupid	org.twitter4j	Highest
Vendor	pom	url	http://twitter4j.org/	Highest
Vendor	pom	groupid	org.twitter4j	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.twitter4j	Medium
Vendor	pom	artifactid	twitter4j-core	Low
Vendor	pom	description	A Java library for the Twitter API	Medium
Product	file	name	twitter4j-core	High
Product	Manifest	Implementation-Title	twitter4j-core	High
Product	central	artifactid	twitter4j-core	Highest
Product	pom	name	twitter4j-core	High
Product	pom	artifactid	twitter4j-core	Highest
Product	Manifest	specification-title	twitter4j-core	Medium
Product	pom	groupid	twitter4j	Low
Product	pom	description	A Java library for the Twitter API	Medium
Product	pom	url	http://twitter4j.org/	Medium
Version	pom	version	3.0.5	Highest
Version	Manifest	Implementation-Version	3.0.5	High
Version	file	version	3.0.5	Highest
Version	central	version	3.0.5	Highest

Identifiers

cpe: cpe:/a:twitter_project:twitter:3.0.5 Confidence:Low
maven: org.twitter4j:twitter4j-core:3.0.5 ✓ Confidence:Highest
cpe: cpe:/a:twitter:twitter:3.0.5 Confidence:Low

scribe-1.3.5.jar

Description: The best OAuth library out there

License:

MIT: http://github.com/fernandezpablo85/scribe-java/blob/master/LICENSE.txt

File Path: /home/ciagent/.m2/repository/org/scribe/scribe/1.3.5/scribe-1.3.5.jar
MD5: 0abb910da19741cd84aabf5520385bc2
SHA1: a3b3deded9d241d9f2c8aa9c9bcd90ad29e2581e
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	central	groupid	org.scribe	Highest
Vendor	jar	package name	builder	Low
Vendor	pom	groupid	scribe	Highest
Vendor	jar	package name	api	Low
Vendor	pom	artifactid	scribe	Low
Vendor	pom	groupid	org.scribe	Highest
Vendor	file	name	scribe	High
Vendor	pom	name	Scribe OAuth Library	High
Vendor	pom	description	The best OAuth library out there	Medium
Vendor	jar	package name	scribe	Low
Vendor	pom	url	http://github.com/fernandezpablo85/scribe-java	Highest
Product	pom	groupid	scribe	Low
Product	central	artifactid	scribe	Highest
Product	jar	package name	builder	Low
Product	jar	package name	api	Low
Product	file	name	scribe	High
Product	pom	url	http://github.com/fernandezpablo85/scribe-java	Medium
Product	pom	name	Scribe OAuth Library	High
Product	pom	description	The best OAuth library out there	Medium
Product	pom	artifactid	scribe	Highest
Version	central	version	1.3.5	Highest
Version	pom	version	1.3.5	Highest
Version	file	version	1.3.5	Highest

Identifiers

cpe: cpe:/a:scribe:scribe:1.3.5 Confidence:Low
maven: org.scribe:scribe:1.3.5 ✓ Confidence:Highest

google-http-client-1.14.1-beta.jar

Description: Google HTTP Client Library for Java. Functionality that works on all supported Java platforms, including Java 5 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.

File Path: /home/ciagent/.m2/repository/com/google/http-client/google-http-client/1.14.1-beta/google-http-client-1.14.1-beta.jar
MD5: 8a3711522ebceef2531d455e2f04a639
SHA1: cb503d4021739e6bac39442ac87b4e311ec77b5e
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	google-http-client	High
Vendor	pom	groupid	google.http-client	Highest
Vendor	central	groupid	com.google.http-client	Highest
Vendor	pom	groupid	com.google.http-client	Highest
Vendor	Manifest	Implementation-Vendor	Google	High
Vendor	pom	parent-artifactid	google-http-client-parent	Low
Vendor	pom	description	Google HTTP Client Library for Java. Functionality that works on all supported Java platforms, including Java 5 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.	Low
Vendor	Manifest	Implementation-Vendor-Id	com.google.http-client	Medium
Vendor	pom	parent-groupid	com.google.http-client	Medium
Vendor	pom	artifactid	google-http-client	Low
Vendor	pom	name	Google HTTP Client Library for Java	High
Product	file	name	google-http-client	High
Product	Manifest	Implementation-Title	Google HTTP Client Library for Java	High
Product	pom	groupid	google.http-client	Low
Product	central	artifactid	google-http-client	Highest
Product	pom	description	Google HTTP Client Library for Java. Functionality that works on all supported Java platforms, including Java 5 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.	Low
Product	pom	artifactid	google-http-client	Highest
Product	pom	parent-artifactid	google-http-client-parent	Medium
Product	pom	parent-groupid	com.google.http-client	Low
Product	pom	name	Google HTTP Client Library for Java	High
Version	file	version	1.14.1.beta	Highest
Version	pom	version	1.14.1-beta	Highest
Version	Manifest	Implementation-Version	1.14.1-beta	High
Version	central	version	1.14.1-beta	Highest

Identifiers

maven: com.google.http-client:google-http-client:1.14.1-beta ✓ Confidence:Highest

jsr305-1.3.9.jar

Description: JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/ciagent/.m2/repository/com/google/code/findbugs/jsr305/1.3.9/jsr305-1.3.9.jar
MD5: 1d5a772e400b04bb67a7ef4a0e0996d8
SHA1: 40719ea6961c0cb6afaeb6a921eaa1f6afd4cfdf
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Forum Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	jar	package name	annotation	Low
Vendor	file	name	jsr305	High
Vendor	pom	groupid	google.code.findbugs	Highest
Vendor	pom	artifactid	jsr305	Low
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Vendor	pom	name	FindBugs-jsr305	High
Vendor	pom	description	JSR305 Annotations for Findbugs	Medium
Vendor	jar	package name	javax	Low
Vendor	central	groupid	com.google.code.findbugs	Highest
Product	jar	package name	annotation	Low
Product	central	artifactid	jsr305	Highest
Product	file	name	jsr305	High
Product	pom	groupid	google.code.findbugs	Low
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Product	pom	name	FindBugs-jsr305	High
Product	pom	artifactid	jsr305	Highest
Product	pom	description	JSR305 Annotations for Findbugs	Medium
Version	pom	version	1.3.9	Highest
Version	file	version	1.3.9	Highest
Version	central	version	1.3.9	Highest

Identifiers

maven: com.google.code.findbugs:jsr305:1.3.9 ✓ Confidence:Highest

google-oauth-client-1.14.1-beta.jar

Description: Google OAuth Client Library for Java. Functionality that works on all supported Java platforms, including Java 5 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.

File Path: /home/ciagent/.m2/repository/com/google/oauth-client/google-oauth-client/1.14.1-beta/google-oauth-client-1.14.1-beta.jar
MD5: 71feea1d54eb7878c12855b7c47ef289
SHA1: 7260cd30808a6d1d4ddef6250e3d92d814aaa4cb
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	com.google.oauth-client	Highest
Vendor	Manifest	Implementation-Vendor	Google	High
Vendor	pom	parent-artifactid	google-oauth-client-parent	Low
Vendor	pom	name	Google OAuth Client Library for Java	High
Vendor	Manifest	Implementation-Vendor-Id	com.google.oauth-client	Medium
Vendor	pom	description	Google OAuth Client Library for Java. Functionality that works on all supported Java platforms, including Java 5 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.	Low
Vendor	central	groupid	com.google.oauth-client	Highest
Vendor	pom	groupid	google.oauth-client	Highest
Vendor	pom	parent-groupid	com.google.oauth-client	Medium
Vendor	file	name	google-oauth-client	High
Vendor	pom	artifactid	google-oauth-client	Low
Product	pom	parent-groupid	com.google.oauth-client	Low
Product	Manifest	Implementation-Title	Google OAuth Client Library for Java	High
Product	pom	parent-artifactid	google-oauth-client-parent	Medium
Product	pom	groupid	google.oauth-client	Low
Product	pom	name	Google OAuth Client Library for Java	High
Product	central	artifactid	google-oauth-client	Highest
Product	pom	artifactid	google-oauth-client	Highest
Product	pom	description	Google OAuth Client Library for Java. Functionality that works on all supported Java platforms, including Java 5 (or higher) desktop (SE) and web (EE), Android, and Google App Engine.	Low
Product	file	name	google-oauth-client	High
Version	file	version	1.14.1.beta	Highest
Version	pom	version	1.14.1-beta	Highest
Version	Manifest	Implementation-Version	1.14.1-beta	High
Version	central	version	1.14.1-beta	Highest

Identifiers

maven: com.google.oauth-client:google-oauth-client:1.14.1-beta ✓ Confidence:Highest

google-api-client-1.14.1-beta.jar

File Path: /home/ciagent/.m2/repository/com/google/api-client/google-api-client/1.14.1-beta/google-api-client-1.14.1-beta.jar
MD5: 6832804471d4d635ed74ae1fbd5d9d86
SHA1: e95d3b6e36fc67bffd7e71ef60bc5af623e73843
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	com.google.api-client	Highest
Vendor	pom	groupid	google.api-client	Highest
Vendor	pom	parent-groupid	com.google.api-client	Medium
Vendor	Manifest	Implementation-Vendor	Google	High
Vendor	pom	name	Google APIs Client Library for Java	High
Vendor	Manifest	Implementation-Vendor-Id	com.google.api-client	Medium
Vendor	pom	artifactid	google-api-client	Low
Vendor	central	groupid	com.google.api-client	Highest
Vendor	file	name	google-api-client	High
Vendor	pom	parent-artifactid	google-api-client-parent	Low
Product	pom	artifactid	google-api-client	Highest
Product	pom	parent-artifactid	google-api-client-parent	Medium
Product	Manifest	Implementation-Title	Google APIs Client Library for Java	High
Product	pom	parent-groupid	com.google.api-client	Low
Product	pom	name	Google APIs Client Library for Java	High
Product	central	artifactid	google-api-client	Highest
Product	pom	groupid	google.api-client	Low
Product	file	name	google-api-client	High
Version	file	version	1.14.1.beta	Highest
Version	pom	version	1.14.1-beta	Highest
Version	Manifest	Implementation-Version	1.14.1-beta	High
Version	central	version	1.14.1-beta	Highest

Identifiers

maven: com.google.api-client:google-api-client:1.14.1-beta ✓ Confidence:Highest

jackson-core-asl-1.9.11.jar

Description: Jackson is a high-performance JSON processor (parser, generator)

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/ciagent/.m2/repository/org/codehaus/jackson/jackson-core-asl/1.9.11/jackson-core-asl-1.9.11.jar
MD5: 49801a6d43725d5c3a1a52ca021d7dc5
SHA1: e32303ef8bd18a5c9272780d49b81c95e05ddf43
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-symbolicname	jackson-core-asl	Medium
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5, JavaSE-1.6	Low
Vendor	file	name	jackson-core-asl	High
Vendor	central	groupid	org.codehaus.jackson	Highest
Vendor	pom	description	Jackson is a high-performance JSON processor (parser, generator)	Medium
Vendor	pom	name	Jackson	High
Vendor	pom	groupid	org.codehaus.jackson	Highest
Vendor	pom	url	http://jackson.codehaus.org	Highest
Vendor	pom	groupid	codehaus.jackson	Highest
Vendor	Manifest	Implementation-Vendor	http://fasterxml.com	High
Vendor	pom	organization url	http://fasterxml.com	Medium
Vendor	pom	artifactid	jackson-core-asl	Low
Vendor	Manifest	specification-vendor	http://www.ietf.org/rfc/rfc4627.txt	Low
Vendor	pom	organization name	FasterXML	High
Product	Manifest	bundle-symbolicname	jackson-core-asl	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5, JavaSE-1.6	Low
Product	Manifest	Bundle-Name	Jackson JSON processor	Medium
Product	file	name	jackson-core-asl	High
Product	pom	organization name	FasterXML	Low
Product	pom	description	Jackson is a high-performance JSON processor (parser, generator)	Medium
Product	pom	artifactid	jackson-core-asl	Highest
Product	pom	name	Jackson	High
Product	Manifest	Implementation-Title	Jackson JSON processor	High
Product	pom	groupid	codehaus.jackson	Low
Product	pom	organization url	http://fasterxml.com	Low
Product	central	artifactid	jackson-core-asl	Highest
Product	Manifest	specification-title	JSON - JavaScript Object Notation	Medium
Product	pom	url	http://jackson.codehaus.org	Medium
Version	Manifest	Implementation-Version	1.9.11	High
Version	central	version	1.9.11	Highest
Version	pom	version	1.9.11	Highest
Version	file	version	1.9.11	Highest

Identifiers

cpe: cpe:/a:fasterxml:jackson:1.9.11 Confidence:Low
maven: org.codehaus.jackson:jackson-core-asl:1.9.11 ✓ Confidence:Highest

google-http-client-jackson-1.14.1-beta.jar

File Path: /home/ciagent/.m2/repository/com/google/http-client/google-http-client-jackson/1.14.1-beta/google-http-client-jackson-1.14.1-beta.jar
MD5: 85d9f42910a68e85ff22d24805688da9
SHA1: 3cfc08bf4b0f62234ff69ff2a0b3c26d7e447829
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	google.http-client	Highest
Vendor	central	groupid	com.google.http-client	Highest
Vendor	pom	name	Jackson extensions to the Google HTTP Client Library for Java.	High
Vendor	pom	groupid	com.google.http-client	Highest
Vendor	Manifest	Implementation-Vendor	Google	High
Vendor	pom	parent-artifactid	google-http-client-parent	Low
Vendor	Manifest	Implementation-Vendor-Id	com.google.http-client	Medium
Vendor	pom	parent-groupid	com.google.http-client	Medium
Vendor	pom	artifactid	google-http-client-jackson	Low
Vendor	file	name	google-http-client-jackson	High
Product	pom	artifactid	google-http-client-jackson	Highest
Product	pom	name	Jackson extensions to the Google HTTP Client Library for Java.	High
Product	Manifest	Implementation-Title	Jackson extensions to the Google HTTP Client Library for Java.	High
Product	pom	groupid	google.http-client	Low
Product	central	artifactid	google-http-client-jackson	Highest
Product	pom	parent-artifactid	google-http-client-parent	Medium
Product	pom	parent-groupid	com.google.http-client	Low
Product	file	name	google-http-client-jackson	High
Version	file	version	1.14.1.beta	Highest
Version	pom	version	1.14.1-beta	Highest
Version	Manifest	Implementation-Version	1.14.1-beta	High
Version	central	version	1.14.1-beta	Highest

Identifiers

maven: com.google.http-client:google-http-client-jackson:1.14.1-beta ✓ Confidence:Highest

google-api-services-plus-v1-rev69-1.14.2-beta.jar

File Path: /home/ciagent/.m2/repository/com/google/apis/google-api-services-plus/v1-rev69-1.14.2-beta/google-api-services-plus-v1-rev69-1.14.2-beta.jar
MD5: fbddf71619f41f1359f0b3abff442444
SHA1: a6c5cc69690a3bd7777025a65b0f1abe66112a5e
Referenced In Projects/Scopes:

eXo PLF:: Social - View Activities:compile
eXo PLF:: Integration - Search - Service:compile
eXo PLF:: Social - Document composer:compile
eXo PLF:: Integration - Search - Portlet:compile
eXo PLF:: Social - Calendar Activities:compile
eXo PLF:: Social - Forum Activities:compile
eXo PLF:: Social - Wiki Activities:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	google-api-services-plus	Low
Vendor	pom	parent-groupid	com.google	Medium
Vendor	jar	package name	services	Low
Vendor	jar	package name	api	Low
Vendor	pom	parent-artifactid	google	Low
Vendor	jar	package name	google	Low
Vendor	pom	groupid	google.apis	Highest
Vendor	central	groupid	com.google.apis	Highest
Vendor	pom	groupid	com.google.apis	Highest
Vendor	file	name	google-api-services-plus-v1-rev69	High
Vendor	pom	name	Google+ API v1 (revision 69)	High
Product	pom	parent-groupid	com.google	Low
Product	jar	package name	services	Low
Product	jar	package name	api	Low
Product	pom	artifactid	google-api-services-plus	Highest
Product	pom	parent-artifactid	google	Medium
Product	jar	package name	plus	Low
Product	pom	groupid	google.apis	Low
Product	central	artifactid	google-api-services-plus	Highest
Product	file	name	google-api-services-plus-v1-rev69	High
Product	pom	name	Google+ API v1 (revision 69)	High
Version	pom	version	v1-rev69-1.14.2-beta	Highest
Version	pom	parent-version	v1-rev69-1.14.2-beta	Low
Version	file	name	google-api-services-plus-v1-rev69	Medium
Version	file	version	1.14.2.beta	Highest
Version	central	version	v1-rev69-1.14.2-beta	Highest

Identifiers

maven: com.google.apis:google-api-services-plus:v1-rev69-1.14.2-beta ✓ Confidence:Highest

google-api-services-oauth2-v2-rev36-1.14.2-beta.jar

File Path: /home/ciagent/.m2/repository/com/google/apis/google-api-services-oauth2/v2-rev36-1.14.2-beta/google-api-services-oauth2-v2-rev36-1.14.2-beta.jar
MD5: cd2ac31ad0317e53e660c2a4578749f3
SHA1: c7249e1e4832f6e6585f7b7db307585b3ae53881

How to read the report | Suppressing false positives | Getting Help: google group | github issues

Project: eXo PLF:: Integration

org.exoplatform.integration:integ:5.3.x-SNAPSHOT

Dependencies

groovy-all-2.4.12.jar

Evidence

Identifiers

juzu-core-1.2.x-SNAPSHOT.jar

Evidence

Identifiers

rhino-1.7R3.jar

Evidence

Identifiers

juzu-plugins-less-1.2.x-SNAPSHOT.jar

Evidence

Identifiers

juzu-plugins-portlet-1.2.x-SNAPSHOT.jar

Evidence

Identifiers

javax.inject-1.jar

Evidence

Identifiers

portlet-api-2.0.jar

Evidence

Identifiers

commons-lang-2.6.jar

Evidence

Identifiers

jcr-1.0.1.jar

Evidence

Identifiers

Published Vulnerabilities

exo.jcr.component.ext-5.3.x-SNAPSHOT.jar

Evidence

Identifiers

mime-util-2.1.3.jar

Evidence

Identifiers

jakarta-regexp-1.4.jar

Evidence

Identifiers

xpp3-1.1.6.jar

Evidence

Identifiers

jcl-over-slf4j-1.7.18.jar

Evidence

Identifiers

slf4j-api-1.7.18.jar

Evidence

Identifiers

exo.kernel.commons-5.3.x-SNAPSHOT.jar

Evidence

Identifiers

javax.servlet-api-3.0.1.jar

Evidence

Identifiers

commons-beanutils-1.8.3.jar

Evidence

Identifiers

Published Vulnerabilities

jibx-run-1.2.6.jar

Evidence

Identifiers

cdi-api-1.0-SP4.jar

Evidence

Identifiers

exo.kernel.container-5.3.x-SNAPSHOT.jar

Evidence

Identifiers

exo.portal.webui.core-5.3.x-SNAPSHOT.jar

Evidence

Related Dependencies

Identifiers

exo.portal.component.resources-5.3.x-SNAPSHOT.jar

Evidence

Related Dependencies

Identifiers

staxnav.core-0.9.8.jar

Evidence

Identifiers