CVE-2016-0710 in the critical feed json
Apache Jetspeed vulnerable to SQL Injection
published 2016-04-11 10 y ago modified 2026-06-17 4 mo ago also GHSA-88f6-79x2-xqf3 , EUVD-2016-0743
- cvss
- 8.8
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 52.4%
- EPSS 52.4% chance of exploitation in 30 days, percentile 98%
- public exploits
- 2
- Metasploit, Exploit-DB
Summary
Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitrary SQL commands via the (1) role or (2) user parameter to services/usermanager/users/.
Patch / fix
- maven org.apache.portals.jetspeed-2:jetspeed 2.3.1
Timeline
- First public exploit (Metasploit exploit/multi/http/apache_jetspeed_file_upload)
- Published
Exploit prediction
52.35% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- Metasploit exploit/multi/http/apache_jetspeed_file_upload Apache Jetspeed Arbitrary File Upload metasploit exploit, manual rank, 2016-03-06
- EDB-39643 Apache Jetspeed - Arbitrary File Upload (Metasploit) remote, 2016-03-31
- haxx.ml http://haxx.ml/post/140552592371/remote-code-execution-in-apache-jetspeed-230-and referenced PoC, tagged "exploit" by a source, unverified
- packetstormsecurity.com http://packetstormsecurity.com/files/136489/Apache-Jetspeed-Arbitrary-File-Upload.html referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 8.8 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| GitHub | 3.0 | 8.8 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| maven | org.apache.portals.jetspeed-2:jetspeed | <2.3.1 |
2.3.1 |
Classification
- Weakness
-
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command
References
-
exploit-db.com
/exploits/39643/
exploit
-
haxx.ml
/post/140552592371/remote-code-execution-in-apache-jetspeed-230-and
web, exploit
-
packetstormsecurity.com
/files/136489/Apache-Jetspeed-Arbitrary-File-Upload.html
web, exploit
-
portals.apache.org
/jetspeed-2/security-reports.html#CVE-2016-0710
web, vendor-advisory
-
mail-archives.apache.org
/mod_mbox/portals-jetspeed-user/201603.mbox/%3C046318A1-226E-453F-9394-B84F1A33E6A4%40bluesunrise.com%3E
mailing-list, web
-
rapid7.com
/db/modules/exploit/multi/http/apache_jetspeed_file_upload
web
-
nvd.nist.gov
/vuln/detail/CVE-2016-0710
advisory
-
mail-archives.apache.org
/mod_mbox/portals-jetspeed-user/201603.mbox/%3C046318A1-226E-453F-9394-B84F1A33E6A4@bluesunrise.com%3E
web
-
exploit-db.com
/exploits/39643
web
Sources
- CVE List CVE-2016-0710
- GitHub Advisory GHSA-88f6-79x2-xqf3
- NVD CVE-2016-0710
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.