Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 3.1.2
Report Generated On: May 26, 2019 at 09:36:48 +00:00
Dependencies Scanned: 1 (1 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD CVE 2002: 16/05/2019 09:15:31
NVD CVE 2003: 24/05/2019 08:15:38
NVD CVE 2004: 16/05/2019 09:15:31
NVD CVE 2005: 24/05/2019 08:15:38
NVD CVE 2006: 23/05/2019 08:15:43
NVD CVE 2007: 25/05/2019 08:15:38
NVD CVE 2008: 25/05/2019 08:15:38
NVD CVE 2009: 24/05/2019 08:15:38
NVD CVE 2010: 24/05/2019 08:15:38
NVD CVE 2011: 23/05/2019 08:15:44
NVD CVE 2012: 25/05/2019 08:15:39
NVD CVE 2013: 25/05/2019 08:15:39
NVD CVE 2014: 25/05/2019 08:15:39
NVD CVE 2015: 25/05/2019 07:45:46
NVD CVE 2016: 25/05/2019 07:45:46
NVD CVE 2017: 25/05/2019 07:45:47
NVD CVE 2018: 25/05/2019 07:45:47
NVD CVE 2019: 26/05/2019 07:15:28
NVD CVE Checked: 26/05/2019 08:05:29
NVD CVE Modified: 26/05/2019 05:15:29
VersionCheckOn: 1558857929499

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	CPE	Coordinates	Highest Severity	CVE Count	CPE Confidence	Evidence Count
portlet-api-2.0.jar		javax.portlet:portlet-api:2.0 ✓		0		22

Dependencies

portlet-api-2.0.jar

Description: The Java Portlet API version 2.0 developed by the Java Community Process JSR-286 Expert Group.

File Path: /home/ciagent/.m2/repository/javax/portlet/portlet-api/2.0/portlet-api-2.0.jar
MD5: 0ec08593cda1df33985391919996c740
SHA1: 1cd72f2a37fcf8ab9893a9468d7ba71c85fe2653
Referenced In Project/Scope: eXo PLF:: Social Vue Portlet Web App:provided

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	portlet-api	High
Vendor	pom	description	The Java Portlet API version 2.0 developed by the Java Community Process JSR-286 Expert Group.	Medium
Vendor	pom	name	Java Portlet Specification V2.0	High
Vendor	pom	url	http://www.jcp.org/en/jsr/detail?id=286	Highest
Vendor	central	groupid	javax.portlet	Highest
Vendor	pom	groupid	javax.portlet	Highest
Vendor	Manifest	bundle-docurl	http://www.jcp.org/en/jsr/detail?id=286	Low
Vendor	pom	artifactid	portlet-api	Low
Vendor	Manifest	bundle-symbolicname	javax.portlet	Medium
Product	file	name	portlet-api	High
Product	pom	artifactid	portlet-api	Highest
Product	pom	description	The Java Portlet API version 2.0 developed by the Java Community Process JSR-286 Expert Group.	Medium
Product	pom	groupid	javax.portlet	Low
Product	pom	name	Java Portlet Specification V2.0	High
Product	pom	url	http://www.jcp.org/en/jsr/detail?id=286	Medium
Product	Manifest	Bundle-Name	JSR 286	Medium
Product	Manifest	bundle-docurl	http://www.jcp.org/en/jsr/detail?id=286	Low
Product	Manifest	bundle-symbolicname	javax.portlet	Medium
Product	central	artifactid	portlet-api	Highest
Version	file	version	2.0	Highest
Version	central	version	2.0	Highest
Version	pom	version	2.0	Highest

Identifiers

maven: javax.portlet:portlet-api:2.0 ✓ Confidence:Highest

How to read the report | Suppressing false positives | Getting Help: google group | github issues

Project: eXo PLF:: Social Vue Portlet Web App

org.exoplatform.social:social-webapp-vue-portlet:5.3.x-SNAPSHOT

Dependencies

portlet-api-2.0.jar

Evidence

Identifiers