Repository

Group

Artifact

Version

Problem Code

Exploitability

(false positive or exploitable)

Inherited from Dependency

Analysis

Compensating Control for exploitable vulnerability

Jira

 

 

 

 

 

False Positive

NO

Vulnerability is in method1. Method1   is never invoked in DCAE.

 

 

 

 

 

 

 

False Positive

Package Name

Vulnerability is in method1. Method1   is never invoked in DCAE.

 

 

 

 

 

 

 

Exploitable

NO

Method1 is used in DCAE, but only with   fixed length input

Implement network controls to restrict   access

 

 

 

 

 

 

Exploitable

Package Name

Method1 is used in DCAE, but only with   fixed length input

Implement network controls to restrict   access

 

  • No labels