Apache Olingo vulnerabilities

3 published CVEs name Apache Olingo among the affected products.

Critical 1High 1Medium 1Low 0Not scored 0

Newest CVEs

CVE-2019-17555
The AsyncResponseWrapperImpl class in Apache Olingo versions 4.0.0 to 4.6.0 reads the Retry-After header and passes it to the Thread.sleep() method without any…
Apache · Olingo
High7.5
CVE-2019-17556
Apache Olingo versions 4.0.0 to 4.6.0 provide the AbstractService class, which is public API, uses ObjectInputStream and doesn't check classes being…
Apache · Olingo
Critical9.8
CVE-2019-17554
The XML content type entity deserializer in Apache Olingo versions 4.0.0 to 4.6.0 is not configured to deny the resolution of external entities. Request with…
Apache · Olingo
Medium5.5