Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 3.1.2
Report Generated On: May 5, 2019 at 07:35:00 +00:00
Dependencies Scanned: 1 (1 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD CVE 2002: 02/05/2019 09:15:31
NVD CVE 2003: 04/05/2019 08:45:56
NVD CVE 2004: 01/05/2019 09:15:33
NVD CVE 2005: 02/05/2019 09:15:32
NVD CVE 2006: 04/05/2019 08:45:56
NVD CVE 2007: 04/05/2019 08:45:56
NVD CVE 2008: 04/05/2019 08:45:57
NVD CVE 2009: 04/05/2019 08:45:57
NVD CVE 2010: 04/05/2019 08:45:57
NVD CVE 2011: 04/05/2019 08:45:57
NVD CVE 2012: 04/05/2019 08:15:38
NVD CVE 2013: 04/05/2019 08:15:39
NVD CVE 2014: 04/05/2019 08:15:39
NVD CVE 2015: 04/05/2019 08:15:39
NVD CVE 2016: 04/05/2019 08:15:39
NVD CVE 2017: 04/05/2019 07:45:42
NVD CVE 2018: 04/05/2019 07:45:42
NVD CVE 2019: 05/05/2019 07:15:28
NVD CVE Checked: 05/05/2019 07:31:17
NVD CVE Modified: 05/05/2019 05:15:30
VersionCheckOn: 1556436575421

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	CPE	Coordinates	Highest Severity	CVE Count	CPE Confidence	Evidence Count
eXoSkin.war		org.exoplatform.platform-ui:platform-ui-skin:5.3.x-SNAPSHOT		0		24

Dependencies

eXoSkin.war

File Path: /srv/ciagent/workspace/PLF/platform-ui-develop-site/sources/platform-ui-skin/target/eXoSkin.war
MD5: 297033f6a277c1f330e722c9246c2b2a
SHA1: 997c8048534785d98186e6068fb3fd57b461b575
Referenced In Project/Scope: eXo PLF:: skin add-on packaging:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	platform-ui-skin	Low
Vendor	Manifest	specification-vendor	eXo Platform SAS	Low
Vendor	pom	groupid	org.exoplatform.platform-ui	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.exoplatform.platform-ui	Medium
Vendor	Manifest	Implementation-Vendor	eXo Platform SAS	High
Vendor	pom	parent-groupid	org.exoplatform.platform-ui	Medium
Vendor	file	name	eXoSkin	High
Vendor	Manifest	date	2019-05-05T07:25:25Z	Low
Vendor	Manifest	implementation-url	https://projects.exoplatform.org/platform-ui/platform-ui-skin	Low
Vendor	pom	name	eXo PLF:: Platform UI - Skin	High
Vendor	pom	groupid	exoplatform.platform-ui	Highest
Vendor	pom	parent-artifactid	platform-ui	Low
Product	pom	groupid	exoplatform.platform-ui	Low
Product	Manifest	Implementation-Title	eXo PLF:: Platform UI - Skin	High
Product	pom	artifactid	platform-ui-skin	Highest
Product	Manifest	specification-title	eXo PLF:: Platform UI - Skin	Medium
Product	pom	parent-artifactid	platform-ui	Medium
Product	file	name	eXoSkin	High
Product	Manifest	date	2019-05-05T07:25:25Z	Low
Product	pom	parent-groupid	org.exoplatform.platform-ui	Low
Product	Manifest	implementation-url	https://projects.exoplatform.org/platform-ui/platform-ui-skin	Low
Product	pom	name	eXo PLF:: Platform UI - Skin	High
Version	pom	version	5.3.x-SNAPSHOT	Highest
Version	Manifest	Implementation-Version	5.3.x-SNAPSHOT	High

Identifiers

maven: org.exoplatform.platform-ui:platform-ui-skin:5.3.x-SNAPSHOT Confidence:High

How to read the report | Suppressing false positives | Getting Help: google group | github issues

Project: eXo PLF:: skin add-on packaging

org.exoplatform.platform-ui:skin-addon-packaging:5.3.x-SNAPSHOT

Dependencies

eXoSkin.war

Evidence

Identifiers