Known vulnerabilities in apache-commons-configuration2

Vendor: SUSE
Software: apache-commons-configuration2
Software CPE: cpe:2.3:o:suse:apache-commons-configuration2:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting apache-commons-configuration2 apache-commons-configuration2 is affected by 4 known vulnerabilities: 3 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145310 - Uncontrolled Recursion
CVE-2026-45205		 CWE-674 Low
No
No
 2.15.0-150200.5.11.1 25.08.2026 SB20260825101
SB20260825115
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 2.15.0-150200.5.11.1 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 2.9.0-150200.5.5.1 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 137 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 2.9.0-150200.5.5.1 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 101 more