Known vulnerabilities in Apache Velocity Engine
Vendor:
Apache Foundation
Software:
Apache Velocity Engine
Software CPE:
cpe:2.3:a:apache_foundation:apache_velocity_engine:*:*:*:*:*:*:*:*
Website:
https://www.apache.org
Total vulnerabilities:
1
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
2.5-RC1
2.4.1-rc1
2.4.1
2.4
2.3-RC2
2.3-RC1
2.3
2.2-RC5
2.2-RC4
2.2-RC3
2.2-RC2
2.2-RC1
2.2
2.1-RC2
2.1-RC1
2.1
2.0-RC8
2.0-RC7
2.0-RC6
2.0-RC5
2.0-RC4
2.0-RC3
2.0-RC2
2.0-RC1
2.0
1.7-beta1
1.7
1.6.4
1.6.3
1.6.2
1.6.1
1.6-beta2
1.6-beta1
1.6
1.5-BETA2
1.5-BETA1
1.5
1.4-RC1
1.4
1.3.1-RC2
1.3.1-RC1
1.3.1
1.3-RC1
1.3
1.2-RC3
1.2-RC2
1.2-RC1
1.2
1.1-RC2
1.1-RC1
1.1
Vulnerabilities (1)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU51511 - Improper Control of Generation of Code ('Code Injection') CVE-2020-13936 |
CWE-94 | High | 2.3 | 16.03.2021 |
SB2021031618 SB2021072614 SB2022011911 and 45 more |