Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 3.1.2
Report Generated On: Jan 20, 2019 at 09:37:06 +00:00
Dependencies Scanned: 7 (7 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD CVE 2002: 30/11/2018 09:08:39
NVD CVE 2003: 18/12/2018 09:11:59
NVD CVE 2004: 18/01/2019 09:12:18
NVD CVE 2005: 18/01/2019 09:10:58
NVD CVE 2006: 18/01/2019 09:08:46
NVD CVE 2007: 18/01/2019 19:33:33
NVD CVE 2008: 18/01/2019 19:33:34
NVD CVE 2009: 18/01/2019 19:33:33
NVD CVE 2010: 18/01/2019 08:55:14
NVD CVE 2011: 18/01/2019 19:33:33
NVD CVE 2012: 18/01/2019 19:33:32
NVD CVE 2013: 18/01/2019 19:33:33
NVD CVE 2014: 18/01/2019 08:38:51
NVD CVE 2015: 18/01/2019 19:33:35
NVD CVE 2016: 18/01/2019 08:30:13
NVD CVE 2017: 18/01/2019 08:24:37
NVD CVE 2018: 18/01/2019 19:33:32
NVD CVE 2019: 18/01/2019 08:00:08
NVD CVE Checked: 20/01/2019 09:27:01
NVD CVE Modified: 18/01/2019 19:04:29
VersionCheckOn: 1545557199441

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	CPE	Coordinates	CPE Confidence	Evidence Count
addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar	cpe:/a:form_manager_project:form_manager:1.4		Low	15
addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar: jansi.dll				2
addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar: jansi.dll				2
addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar/META-INF/maven/com.beust/jcommander/pom.xml		com.beust:jcommander:1.35		11
addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar/META-INF/maven/jline/jline/pom.xml		jline:jline:2.12		7
addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar/META-INF/maven/org.eclipse.aether/aether-api/pom.xml		org.eclipse.aether:aether-api:1.1.0		13
addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar/META-INF/maven/org.eclipse.aether/aether-util/pom.xml		org.eclipse.aether:aether-util:1.1.0		13

Dependencies

addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar

File Path: /home/ciagent/.m2/repository/org/exoplatform/platform/addons-manager/1.4.x-SNAPSHOT/addons-manager-1.4.x-SNAPSHOT.zip/addons/addons-manager.jar
MD5: 5aa69e6ed0bc5b6154ae6b91999abe10
SHA1: 678049cf38abee0b149e5052b9d93b87a083cc4a
Referenced In Project/Scope: eXo PLF:: Platform Public Distributions - Shared Resources:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	implementation-url	https://projects.exoplatform.org/addons-manager	Low
Vendor	Manifest	Implementation-Vendor	eXo Platform SAS	High
Vendor	Manifest	specification-vendor	eXo Platform SAS	Low
Vendor	jar	package name	groovy	Low
Vendor	Manifest	date	2019-01-13T12:57:36Z	Low
Vendor	file	name	addons-manager	High
Vendor	Manifest	Implementation-Vendor-Id	org.exoplatform.platform	Medium
Vendor	jar	package name	codehaus	Low
Product	Manifest	implementation-url	https://projects.exoplatform.org/addons-manager	Low
Product	jar	package name	groovy	Low
Product	Manifest	date	2019-01-13T12:57:36Z	Low
Product	Manifest	Implementation-Title	eXo Platform - Add-ons Manager	High
Product	file	name	addons-manager	High
Product	Manifest	specification-title	eXo Platform - Add-ons Manager	Medium
Version	Manifest	Implementation-Version	1.4.x-SNAPSHOT	High

Identifiers

cpe: cpe:/a:form_manager_project:form_manager:1.4 Confidence:Low

addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar: jansi.dll

File Path: /home/ciagent/.m2/repository/org/exoplatform/platform/addons-manager/1.4.x-SNAPSHOT/addons-manager-1.4.x-SNAPSHOT.zip/addons/addons-manager.jar/META-INF/native/windows64/jansi.dll
MD5: fd3a20891286c958103f3ea07174cd3c
SHA1: 829195c9e338d5725cf304ae33fc209db53884eb
Referenced In Project/Scope: eXo PLF:: Platform Public Distributions - Shared Resources:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jansi	High
Product	file	name	jansi	High

Identifiers

None

addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar: jansi.dll

File Path: /home/ciagent/.m2/repository/org/exoplatform/platform/addons-manager/1.4.x-SNAPSHOT/addons-manager-1.4.x-SNAPSHOT.zip/addons/addons-manager.jar/META-INF/native/windows32/jansi.dll
MD5: 1e56641bb68937f8e2020cbff5d04a08
SHA1: 97f6e12599bb5848867b9762184d055ed918ab2a
Referenced In Project/Scope: eXo PLF:: Platform Public Distributions - Shared Resources:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jansi	High
Product	file	name	jansi	High

Identifiers

None

addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar/META-INF/maven/com.beust/jcommander/pom.xml

Description: A Java framework to parse command line options with annotations.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/ciagent/.m2/repository/org/exoplatform/platform/addons-manager/1.4.x-SNAPSHOT/addons-manager-1.4.x-SNAPSHOT.zip/addons/addons-manager.jar/META-INF/maven/com.beust/jcommander/pom.xml
MD5: 476d9301d9a9ba636a79e1e127cb201d
SHA1: 643abcc29f656bfd9ff6b0c720264642bc10017f

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	JCommander	High
Vendor	pom	url	http://beust.com/jcommander	Highest
Vendor	pom	groupid	beust	Highest
Vendor	pom	artifactid	jcommander	Low
Vendor	pom	description	A Java framework to parse command line options with annotations.	Medium
Product	pom	name	JCommander	High
Product	pom	url	http://beust.com/jcommander	Medium
Product	pom	artifactid	jcommander	Highest
Product	pom	description	A Java framework to parse command line options with annotations.	Medium
Product	pom	groupid	beust	Low
Version	pom	version	1.35	Highest

Identifiers

maven: com.beust:jcommander:1.35 Confidence:High

addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar/META-INF/maven/jline/jline/pom.xml

License:

The BSD License: http://www.opensource.org/licenses/bsd-license.php

File Path: /home/ciagent/.m2/repository/org/exoplatform/platform/addons-manager/1.4.x-SNAPSHOT/addons-manager-1.4.x-SNAPSHOT.zip/addons/addons-manager.jar/META-INF/maven/jline/jline/pom.xml
MD5: c115487107302a4d8b15dfe918a3ee92
SHA1: c360defa993e6b59531e23966a89415c3db54848

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	JLine	High
Vendor	pom	artifactid	jline	Low
Vendor	pom	groupid	jline	Highest
Product	pom	name	JLine	High
Product	pom	artifactid	jline	Highest
Product	pom	groupid	jline	Low
Version	pom	version	2.12	Highest

Identifiers

maven: jline:jline:2.12 Confidence:High

addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar/META-INF/maven/org.eclipse.aether/aether-api/pom.xml

Description: The application programming interface for the repository system.

File Path: /home/ciagent/.m2/repository/org/exoplatform/platform/addons-manager/1.4.x-SNAPSHOT/addons-manager-1.4.x-SNAPSHOT.zip/addons/addons-manager.jar/META-INF/maven/org.eclipse.aether/aether-api/pom.xml
MD5: fc000d7bc8dbb2b892a953bc3c9ab822
SHA1: ea104d5d0d8d6e495088cc49c71ae3a5b9c04634

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-artifactid	aether	Low
Vendor	pom	artifactid	aether-api	Low
Vendor	pom	description	The application programming interface for the repository system.	Medium
Vendor	pom	groupid	eclipse.aether	Highest
Vendor	pom	name	Aether API	High
Vendor	pom	parent-groupid	org.eclipse.aether	Medium
Product	pom	parent-groupid	org.eclipse.aether	Low
Product	pom	description	The application programming interface for the repository system.	Medium
Product	pom	artifactid	aether-api	Highest
Product	pom	name	Aether API	High
Product	pom	groupid	eclipse.aether	Low
Product	pom	parent-artifactid	aether	Medium
Version	pom	version	1.1.0	Highest

Identifiers

maven: org.eclipse.aether:aether-api:1.1.0 Confidence:High

addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar/META-INF/maven/org.eclipse.aether/aether-util/pom.xml

Description: A collection of utility classes to ease usage of the repository system.

File Path: /home/ciagent/.m2/repository/org/exoplatform/platform/addons-manager/1.4.x-SNAPSHOT/addons-manager-1.4.x-SNAPSHOT.zip/addons/addons-manager.jar/META-INF/maven/org.eclipse.aether/aether-util/pom.xml
MD5: cfb325be4744f65098b66ee34e265322
SHA1: 2648fa8032a1428718a58b53fb9badae64643dd0

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-artifactid	aether	Low
Vendor	pom	name	Aether Utilities	High
Vendor	pom	groupid	eclipse.aether	Highest
Vendor	pom	parent-groupid	org.eclipse.aether	Medium
Vendor	pom	artifactid	aether-util	Low
Vendor	pom	description	A collection of utility classes to ease usage of the repository system.	Medium
Product	pom	parent-groupid	org.eclipse.aether	Low
Product	pom	name	Aether Utilities	High
Product	pom	groupid	eclipse.aether	Low
Product	pom	parent-artifactid	aether	Medium
Product	pom	artifactid	aether-util	Highest
Product	pom	description	A collection of utility classes to ease usage of the repository system.	Medium
Version	pom	version	1.1.0	Highest

Identifiers

maven: org.eclipse.aether:aether-util:1.1.0 Confidence:High

How to read the report | Suppressing false positives | Getting Help: google group | github issues

Project: eXo PLF:: Platform Public Distributions - Shared Resources

org.exoplatform.platform.distributions:plf-packaging-resources:5.2.x-SNAPSHOT

Dependencies

addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar

Evidence

Identifiers

addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar: jansi.dll

Evidence

Identifiers

addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar: jansi.dll

Evidence

Identifiers

addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar/META-INF/maven/com.beust/jcommander/pom.xml

Evidence

Identifiers

addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar/META-INF/maven/jline/jline/pom.xml

Evidence

Identifiers

addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar/META-INF/maven/org.eclipse.aether/aether-api/pom.xml

Evidence

Identifiers

addons-manager-1.4.x-SNAPSHOT.zip: addons-manager.jar/META-INF/maven/org.eclipse.aether/aether-util/pom.xml

Evidence

Identifiers