Advisories · Technology
provectus kafka-ui.
Every CVE that names provectus kafka-ui among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
provectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injection
- provectus kafka-ui
- Other injection
- Code injection
- CVSS 6.9 Medium
provectus kafka-ui Endpoint testexecutions validateAccess code injection
- provectus kafka-ui
- Other injection
- Code injection
- CVSS 8.1 HighCritical · CVSS 7+ and EPSS
Remote code execution via JNDI resolution in JMX metrics collection in Kafka UI
- provectus kafka-ui
- Code injection
- Insecure deserialization