cwe-917
Safeguard articles tagged "cwe-917" — guides, analysis, and best practices for software supply chain and application security.
6 articles
CVE-2021-26084: Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
CVE-2021-26084 affects Atlassian Confluence Server and Data Center and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2020-17530: Apache Struts Remote Code Execution Vulnerability
CVE-2020-17530 affects Apache Struts and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2020-10199: Sonatype Nexus Repository Remote Code Execution Vulnerability
CVE-2020-10199 affects Sonatype Nexus Repository and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2022-26134: Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
CVE-2022-26134 affects Atlassian Confluence Server/Data Center and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-06-02.
CVE-2021-45046: Apache Log4j2 Deserialization of Untrusted Data Vulnerability
CVE-2021-45046 affects Apache Log4j2 and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-05-01.
Log4Shell (CVE-2021-44228): The Log4j RCE and Its Supply Chain Lesson
A factual look at Log4Shell, the critical remote code execution vulnerability in Apache Log4j disclosed in December 2021, and why it became a defining supply chain security event.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.