[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-48734":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T20:55:33.689Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":855,"aliases":856,"duplicate_of":9,"upstream":858,"downstream":859,"duplicates":918,"related":919,"reserved_at":9,"published_at":952,"modified_at":953,"state":954,"summary":955,"references_raw":964,"kevs":997,"epss":998,"epss_history":1001,"metrics":1279,"affected":1289},"CVE-2025-48734","Improper Access Control vulnerability in Apache Commons.\n\n\n\nA special BeanIntrospector class was added in version 1.9.2. This can be used to stop attackers from using the declared class property of Java enum objects to get access to the classloader. However this protection was not enabled by default. PropertyUtilsBean (and consequently BeanUtilsBean) now disallows declared class level property access by default.\n\n\n\n\n\nReleases 1.11.0 and 2.0.0-M2 address a potential security issue when accessing enum properties in an uncontrolled way. If an application using Commons BeanUtils passes property paths from an external source directly to the getProperty() method of PropertyUtilsBean, an attacker can access the enum’s class loader via the “declaredClass” property available on all Java “enum” objects. Accessing the enum’s “declaredClass” allows remote attackers to access the ClassLoader and execute arbitrary code. The same issue exists with PropertyUtilsBean.getNestedProperty().\nStarting in versions 1.11.0 and 2.0.0-M2 a special BeanIntrospector suppresses the “declaredClass” property. Note that this new BeanIntrospector is enabled by default, but you can disable it to regain the old behavior; see section 2.5 of the user's guide and the unit tests.\n\nThis issue affects Apache Commons BeanUtils 1.x before 1.11.0, and 2.x before 2.0.0-M2.Users of the artifact commons-beanutils:commons-beanutils\n\n 1.x are recommended to upgrade to version 1.11.0, which fixes the issue.\n\n\nUsers of the artifact org.apache.commons:commons-beanutils2\n\n 2.x are recommended to upgrade to version 2.0.0-M2, which fixes the issue.",null,[11,18],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-OTHER","Other","NVD uses this CWE ID when the weakness does not map to any existing CWE entry.","placeholder","NVD-Reserved",[],{"_key":19,"id":19,"name":20,"description":21,"type":22,"status":23,"abstraction":24,"likelihood_of_exploit":9,"capec":25},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","weakness","Incomplete","Pillar",[26,113,117,167,180,184,188,192,196,239,278,388,405,508,528,532,692],{"id":27,"name":28,"techniques":29},"CAPEC-19","Embedding Scripts within Scripts",[30,41,106],{"id":31,"name":32,"tactics":33,"countermeasures":40},"T1027.009","Embedded Payloads",[34,37],{"id":35,"name":36},"TA0030","Defense Evasion",{"id":38,"name":39},"TA0005","Stealth",[],{"id":42,"name":43,"tactics":44,"countermeasures":51},"T1546.004","Unix Shell Configuration Modification",[45,48],{"id":46,"name":47},"TA0111","Privilege Escalation",{"id":49,"name":50},"TA0110","Persistence",[52,57,61,65,70,75,80,85,90,94,98,102],{"id":53,"name":54,"tactic":55},"D3-FA","File Analysis",{"name":56},"Detect",{"id":58,"name":59,"tactic":60},"D3-FIM","File Integrity Monitoring",{"name":56},{"id":62,"name":63,"tactic":64},"D3-USICA","User Session Init Config Analysis",{"name":56},{"id":66,"name":67,"tactic":68},"D3-FEV","File Eviction",{"name":69},"Evict",{"id":71,"name":72,"tactic":73},"D3-DF","Decoy File",{"name":74},"Deceive",{"id":76,"name":77,"tactic":78},"D3-FE","File Encryption",{"name":79},"Harden",{"id":81,"name":82,"tactic":83},"D3-RF","Restore File",{"name":84},"Restore",{"id":86,"name":87,"tactic":88},"D3-CF","Content Filtering",{"name":89},"Isolate",{"id":91,"name":92,"tactic":93},"D3-LFP","Local File Permissions",{"name":89},{"id":95,"name":96,"tactic":97},"D3-RFAM","Remote File Access Mediation",{"name":89},{"id":99,"name":100,"tactic":101},"D3-CQ","Content Quarantine",{"name":89},{"id":103,"name":104,"tactic":105},"D3-CM","Content Modification",{"name":89},{"id":107,"name":108,"tactics":109,"countermeasures":112},"T1546.016","Installer Packages",[110,111],{"id":46,"name":47},{"id":49,"name":50},[],{"id":114,"name":115,"techniques":116},"CAPEC-441","Malicious Logic Insertion",[],{"id":118,"name":119,"techniques":120},"CAPEC-478","Modification of Windows Service Configuration",[121,148],{"id":122,"name":123,"tactics":124,"countermeasures":132},"T1574.011","Services Registry Permissions Weakness",[125,126,127,128,129],{"id":49,"name":50},{"id":46,"name":47},{"id":35,"name":36},{"id":38,"name":39},{"id":130,"name":131},"TA0104","Execution",[133,138,142,146],{"id":134,"name":135,"tactic":136},"D3-CI","Configuration Inventory",{"name":137},"Model",{"id":139,"name":140,"tactic":141},"D3-SICA","System Init Config Analysis",{"name":56},{"id":143,"name":144,"tactic":145},"D3-RC","Restore Configuration",{"name":84},{"id":99,"name":100,"tactic":147},{"name":89},{"id":149,"name":150,"tactics":151,"countermeasures":154},"T1543.003","Windows Service",[152,153],{"id":49,"name":50},{"id":46,"name":47},[155,159,163],{"id":156,"name":157,"tactic":158},"D3-DI","Data Inventory",{"name":137},{"id":160,"name":161,"tactic":162},"D3-SCP","System Configuration Permissions",{"name":79},{"id":164,"name":165,"tactic":166},"D3-RD","Restore Database",{"name":84},{"id":168,"name":169,"techniques":170},"CAPEC-479","Malicious Root Certificate",[171],{"id":172,"name":173,"tactics":174,"countermeasures":179},"T1553.004","Install Root Certificate",[175,176],{"id":35,"name":36},{"id":177,"name":178},"TA0112","Defense Impairment",[],{"id":181,"name":182,"techniques":183},"CAPEC-502","Intent Spoof",[],{"id":185,"name":186,"techniques":187},"CAPEC-503","WebView Exposure",[],{"id":189,"name":190,"techniques":191},"CAPEC-536","Data Injected During Configuration",[],{"id":193,"name":194,"techniques":195},"CAPEC-546","Incomplete Data Deletion in a Multi-Tenant Environment",[],{"id":197,"name":198,"techniques":199},"CAPEC-550","Install New Service",[200],{"id":201,"name":202,"tactics":203,"countermeasures":206},"T1543","Create or Modify System Process",[204,205],{"id":49,"name":50},{"id":46,"name":47},[207,209,211,213,217,219,221,223,225,227,229,231,233,235,237],{"id":156,"name":157,"tactic":208},{"name":137},{"id":53,"name":54,"tactic":210},{"name":56},{"id":58,"name":59,"tactic":212},{"name":56},{"id":214,"name":215,"tactic":216},"D3-SFA","System File Analysis",{"name":56},{"id":66,"name":67,"tactic":218},{"name":69},{"id":71,"name":72,"tactic":220},{"name":74},{"id":76,"name":77,"tactic":222},{"name":79},{"id":160,"name":161,"tactic":224},{"name":79},{"id":81,"name":82,"tactic":226},{"name":84},{"id":164,"name":165,"tactic":228},{"name":84},{"id":86,"name":87,"tactic":230},{"name":89},{"id":91,"name":92,"tactic":232},{"name":89},{"id":95,"name":96,"tactic":234},{"name":89},{"id":99,"name":100,"tactic":236},{"name":89},{"id":103,"name":104,"tactic":238},{"name":89},{"id":240,"name":241,"techniques":242},"CAPEC-551","Modify Existing Service",[243],{"id":201,"name":202,"tactics":244,"countermeasures":247},[245,246],{"id":49,"name":50},{"id":46,"name":47},[248,250,252,254,256,258,260,262,264,266,268,270,272,274,276],{"id":156,"name":157,"tactic":249},{"name":137},{"id":53,"name":54,"tactic":251},{"name":56},{"id":58,"name":59,"tactic":253},{"name":56},{"id":214,"name":215,"tactic":255},{"name":56},{"id":66,"name":67,"tactic":257},{"name":69},{"id":71,"name":72,"tactic":259},{"name":74},{"id":76,"name":77,"tactic":261},{"name":79},{"id":160,"name":161,"tactic":263},{"name":79},{"id":81,"name":82,"tactic":265},{"name":84},{"id":164,"name":165,"tactic":267},{"name":84},{"id":86,"name":87,"tactic":269},{"name":89},{"id":91,"name":92,"tactic":271},{"name":89},{"id":95,"name":96,"tactic":273},{"name":89},{"id":99,"name":100,"tactic":275},{"name":89},{"id":103,"name":104,"tactic":277},{"name":89},{"id":279,"name":280,"techniques":281},"CAPEC-552","Install Rootkit ",[282,339,359],{"id":283,"name":284,"tactics":285,"countermeasures":288},"T1014","Rootkit",[286,287],{"id":35,"name":36},{"id":38,"name":39},[289,293,297,299,301,305,309,313,315,317,319,323,325,329,331,333,335,337],{"id":290,"name":291,"tactic":292},"D3-SWI","Software Inventory",{"name":137},{"id":294,"name":295,"tactic":296},"D3-AVE","Asset Vulnerability Enumeration",{"name":137},{"id":53,"name":54,"tactic":298},{"name":56},{"id":58,"name":59,"tactic":300},{"name":56},{"id":302,"name":303,"tactic":304},"D3-FEMC","Firmware Embedded Monitoring Code",{"name":56},{"id":306,"name":307,"tactic":308},"D3-FV","Firmware Verification",{"name":56},{"id":310,"name":311,"tactic":312},"D3-FBA","Firmware Behavior Analysis",{"name":56},{"id":66,"name":67,"tactic":314},{"name":69},{"id":71,"name":72,"tactic":316},{"name":74},{"id":76,"name":77,"tactic":318},{"name":79},{"id":320,"name":321,"tactic":322},"D3-SU","Software Update",{"name":79},{"id":81,"name":82,"tactic":324},{"name":84},{"id":326,"name":327,"tactic":328},"D3-RS","Restore Software",{"name":84},{"id":86,"name":87,"tactic":330},{"name":89},{"id":91,"name":92,"tactic":332},{"name":89},{"id":95,"name":96,"tactic":334},{"name":89},{"id":99,"name":100,"tactic":336},{"name":89},{"id":103,"name":104,"tactic":338},{"name":89},{"id":340,"name":341,"tactics":342,"countermeasures":346},"T1542.003","Bootkit",[343,344,345],{"id":35,"name":36},{"id":38,"name":39},{"id":49,"name":50},[347,349,351,353,357],{"id":290,"name":291,"tactic":348},{"name":137},{"id":294,"name":295,"tactic":350},{"name":137},{"id":320,"name":321,"tactic":352},{"name":79},{"id":354,"name":355,"tactic":356},"D3-BA","Bootloader Authentication",{"name":79},{"id":326,"name":327,"tactic":358},{"name":84},{"id":360,"name":361,"tactics":362,"countermeasures":365},"T1547.006","Kernel Modules and Extensions",[363,364],{"id":49,"name":50},{"id":46,"name":47},[366,368,370,372,374,376,378,380,382,384,386],{"id":53,"name":54,"tactic":367},{"name":56},{"id":58,"name":59,"tactic":369},{"name":56},{"id":66,"name":67,"tactic":371},{"name":69},{"id":71,"name":72,"tactic":373},{"name":74},{"id":76,"name":77,"tactic":375},{"name":79},{"id":81,"name":82,"tactic":377},{"name":84},{"id":86,"name":87,"tactic":379},{"name":89},{"id":91,"name":92,"tactic":381},{"name":89},{"id":95,"name":96,"tactic":383},{"name":89},{"id":99,"name":100,"tactic":385},{"name":89},{"id":103,"name":104,"tactic":387},{"name":89},{"id":389,"name":390,"techniques":391},"CAPEC-556","Replace File Extension Handlers",[392],{"id":393,"name":394,"tactics":395,"countermeasures":398},"T1546.001","Change Default File Association",[396,397],{"id":46,"name":47},{"id":49,"name":50},[399,401,403],{"id":134,"name":135,"tactic":400},{"name":137},{"id":143,"name":144,"tactic":402},{"name":84},{"id":99,"name":100,"tactic":404},{"name":89},{"id":406,"name":407,"techniques":408},"CAPEC-558","Replace Trusted Executable",[409,415],{"id":410,"name":411,"tactics":412,"countermeasures":414},"T1505.005","Terminal Services DLL",[413],{"id":49,"name":50},[],{"id":416,"name":417,"tactics":418,"countermeasures":421},"T1546.008","Accessibility Features",[419,420],{"id":46,"name":47},{"id":49,"name":50},[422,424,426,428,432,436,440,444,448,452,456,460,464,468,472,476,478,480,482,484,486,488,490,492,494,496,500,504],{"id":134,"name":135,"tactic":423},{"name":137},{"id":53,"name":54,"tactic":425},{"name":56},{"id":58,"name":59,"tactic":427},{"name":56},{"id":429,"name":430,"tactic":431},"D3-DA","Dynamic Analysis",{"name":56},{"id":433,"name":434,"tactic":435},"D3-EFA","Emulated File Analysis",{"name":56},{"id":437,"name":438,"tactic":439},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":56},{"id":441,"name":442,"tactic":443},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":56},{"id":445,"name":446,"tactic":447},"D3-CSPP","Client-server Payload Profiling",{"name":56},{"id":449,"name":450,"tactic":451},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":56},{"id":453,"name":454,"tactic":455},"D3-NTSA","Network Traffic Signature Analysis",{"name":56},{"id":457,"name":458,"tactic":459},"D3-APCA","Application Protocol Command Analysis",{"name":56},{"id":461,"name":462,"tactic":463},"D3-NTCD","Network Traffic Community Deviation",{"name":56},{"id":465,"name":466,"tactic":467},"D3-RTSD","Remote Terminal Session Detection",{"name":56},{"id":469,"name":470,"tactic":471},"D3-CAA","Connection Attempt Analysis",{"name":56},{"id":473,"name":474,"tactic":475},"D3-ANAA","Administrative Network Activity Analysis",{"name":56},{"id":66,"name":67,"tactic":477},{"name":69},{"id":71,"name":72,"tactic":479},{"name":74},{"id":76,"name":77,"tactic":481},{"name":79},{"id":81,"name":82,"tactic":483},{"name":84},{"id":143,"name":144,"tactic":485},{"name":84},{"id":86,"name":87,"tactic":487},{"name":89},{"id":91,"name":92,"tactic":489},{"name":89},{"id":95,"name":96,"tactic":491},{"name":89},{"id":99,"name":100,"tactic":493},{"name":89},{"id":103,"name":104,"tactic":495},{"name":89},{"id":497,"name":498,"tactic":499},"D3-EAL","Executable Allowlisting",{"name":89},{"id":501,"name":502,"tactic":503},"D3-EDL","Executable Denylisting",{"name":89},{"id":505,"name":506,"tactic":507},"D3-NTF","Network Traffic Filtering",{"name":89},{"id":509,"name":510,"techniques":511},"CAPEC-562","Modify Shared File",[512],{"id":513,"name":514,"tactics":515,"countermeasures":519},"T1080","Taint Shared Content",[516],{"id":517,"name":518},"TA0109","Lateral Movement",[520,524],{"id":521,"name":522,"tactic":523},"D3-DNR","Decoy Network Resource",{"name":74},{"id":525,"name":526,"tactic":527},"D3-NRAM","Network Resource Access Mediation",{"name":89},{"id":529,"name":530,"techniques":531},"CAPEC-563","Add Malicious File to Shared Webroot",[],{"id":533,"name":534,"techniques":535},"CAPEC-564","Run Software at Logon",[536,583,612,641],{"id":537,"name":538,"tactics":539,"countermeasures":542},"T1037","Boot or Logon Initialization Scripts",[540,541],{"id":49,"name":50},{"id":46,"name":47},[543,545,547,549,551,553,555,557,559,561,563,565,567,569,571,573,575,577,579,581],{"id":134,"name":135,"tactic":544},{"name":137},{"id":53,"name":54,"tactic":546},{"name":56},{"id":58,"name":59,"tactic":548},{"name":56},{"id":429,"name":430,"tactic":550},{"name":56},{"id":433,"name":434,"tactic":552},{"name":56},{"id":139,"name":140,"tactic":554},{"name":56},{"id":66,"name":67,"tactic":556},{"name":69},{"id":71,"name":72,"tactic":558},{"name":74},{"id":521,"name":522,"tactic":560},{"name":74},{"id":76,"name":77,"tactic":562},{"name":79},{"id":81,"name":82,"tactic":564},{"name":84},{"id":143,"name":144,"tactic":566},{"name":84},{"id":86,"name":87,"tactic":568},{"name":89},{"id":91,"name":92,"tactic":570},{"name":89},{"id":95,"name":96,"tactic":572},{"name":89},{"id":99,"name":100,"tactic":574},{"name":89},{"id":103,"name":104,"tactic":576},{"name":89},{"id":497,"name":498,"tactic":578},{"name":89},{"id":501,"name":502,"tactic":580},{"name":89},{"id":525,"name":526,"tactic":582},{"name":89},{"id":584,"name":585,"tactics":586,"countermeasures":589},"T1543.001","Launch Agent",[587,588],{"id":49,"name":50},{"id":46,"name":47},[590,592,594,596,598,600,602,604,606,608,610],{"id":53,"name":54,"tactic":591},{"name":56},{"id":58,"name":59,"tactic":593},{"name":56},{"id":66,"name":67,"tactic":595},{"name":69},{"id":71,"name":72,"tactic":597},{"name":74},{"id":76,"name":77,"tactic":599},{"name":79},{"id":81,"name":82,"tactic":601},{"name":84},{"id":86,"name":87,"tactic":603},{"name":89},{"id":91,"name":92,"tactic":605},{"name":89},{"id":95,"name":96,"tactic":607},{"name":89},{"id":99,"name":100,"tactic":609},{"name":89},{"id":103,"name":104,"tactic":611},{"name":89},{"id":613,"name":614,"tactics":615,"countermeasures":618},"T1543.004","Launch Daemon",[616,617],{"id":49,"name":50},{"id":46,"name":47},[619,621,623,625,627,629,631,633,635,637,639],{"id":53,"name":54,"tactic":620},{"name":56},{"id":58,"name":59,"tactic":622},{"name":56},{"id":66,"name":67,"tactic":624},{"name":69},{"id":71,"name":72,"tactic":626},{"name":74},{"id":76,"name":77,"tactic":628},{"name":79},{"id":81,"name":82,"tactic":630},{"name":84},{"id":86,"name":87,"tactic":632},{"name":89},{"id":91,"name":92,"tactic":634},{"name":89},{"id":95,"name":96,"tactic":636},{"name":89},{"id":99,"name":100,"tactic":638},{"name":89},{"id":103,"name":104,"tactic":640},{"name":89},{"id":642,"name":643,"tactics":644,"countermeasures":647},"T1547","Boot or Logon Autostart Execution",[645,646],{"id":49,"name":50},{"id":46,"name":47},[648,650,652,654,656,658,660,662,664,666,668,670,672,674,676,678,680,682,684,686,688,690],{"id":134,"name":135,"tactic":649},{"name":137},{"id":290,"name":291,"tactic":651},{"name":137},{"id":294,"name":295,"tactic":653},{"name":137},{"id":53,"name":54,"tactic":655},{"name":56},{"id":58,"name":59,"tactic":657},{"name":56},{"id":139,"name":140,"tactic":659},{"name":56},{"id":429,"name":430,"tactic":661},{"name":56},{"id":433,"name":434,"tactic":663},{"name":56},{"id":66,"name":67,"tactic":665},{"name":69},{"id":71,"name":72,"tactic":667},{"name":74},{"id":76,"name":77,"tactic":669},{"name":79},{"id":320,"name":321,"tactic":671},{"name":79},{"id":81,"name":82,"tactic":673},{"name":84},{"id":143,"name":144,"tactic":675},{"name":84},{"id":326,"name":327,"tactic":677},{"name":84},{"id":86,"name":87,"tactic":679},{"name":89},{"id":91,"name":92,"tactic":681},{"name":89},{"id":95,"name":96,"tactic":683},{"name":89},{"id":99,"name":100,"tactic":685},{"name":89},{"id":103,"name":104,"tactic":687},{"name":89},{"id":497,"name":498,"tactic":689},{"name":89},{"id":501,"name":502,"tactic":691},{"name":89},{"id":693,"name":694,"techniques":695},"CAPEC-578","Disable Security Software",[696,755,788,807,818,829,840],{"id":697,"name":698,"tactics":699,"countermeasures":706},"T1556.006","Multi-Factor Authentication",[700,701,702,703],{"id":35,"name":36},{"id":177,"name":178},{"id":49,"name":50},{"id":704,"name":705},"TA0031","Credential Access",[707,711,715,719,723,727,731,735,739,743,747,751],{"id":708,"name":709,"tactic":710},"D3-PLA","Process Lineage Analysis",{"name":56},{"id":712,"name":713,"tactic":714},"D3-PSMD","Process Self-Modification Detection",{"name":56},{"id":716,"name":717,"tactic":718},"D3-PSA","Process Spawn Analysis",{"name":56},{"id":720,"name":721,"tactic":722},"D3-PT","Process Termination",{"name":69},{"id":724,"name":725,"tactic":726},"D3-PS","Process Suspension",{"name":69},{"id":728,"name":729,"tactic":730},"D3-HR","Host Reboot",{"name":69},{"id":732,"name":733,"tactic":734},"D3-HS","Host Shutdown",{"name":69},{"id":736,"name":737,"tactic":738},"D3-KBPI","Kernel-based Process Isolation",{"name":89},{"id":740,"name":741,"tactic":742},"D3-SCF","System Call Filtering",{"name":89},{"id":744,"name":745,"tactic":746},"D3-HBPI","Hardware-based Process Isolation",{"name":89},{"id":748,"name":749,"tactic":750},"D3-ABPI","Application-based Process Isolation",{"name":89},{"id":752,"name":753,"tactic":754},"D3-WSAM","Web Session Access Mediation",{"name":89},{"id":756,"name":757,"tactics":758,"countermeasures":761},"T1562.001","Disable or Modify Tools",[759,760],{"id":35,"name":36},{"id":38,"name":39},[762,764,766,768,772,774,776,778,780,782,784,786],{"id":708,"name":709,"tactic":763},{"name":56},{"id":712,"name":713,"tactic":765},{"name":56},{"id":716,"name":717,"tactic":767},{"name":56},{"id":769,"name":770,"tactic":771},"D3-SDM","System Daemon Monitoring",{"name":56},{"id":720,"name":721,"tactic":773},{"name":69},{"id":724,"name":725,"tactic":775},{"name":69},{"id":728,"name":729,"tactic":777},{"name":69},{"id":732,"name":733,"tactic":779},{"name":69},{"id":736,"name":737,"tactic":781},{"name":89},{"id":740,"name":741,"tactic":783},{"name":89},{"id":744,"name":745,"tactic":785},{"name":89},{"id":748,"name":749,"tactic":787},{"name":89},{"id":789,"name":790,"tactics":791,"countermeasures":794},"T1562.002","Disable Windows Event Logging",[792,793],{"id":35,"name":36},{"id":38,"name":39},[795,797,801,805],{"id":134,"name":135,"tactic":796},{"name":137},{"id":798,"name":799,"tactic":800},"D3-DRA","Disable Remote Access",{"name":79},{"id":802,"name":803,"tactic":804},"D3-ACH","Application Configuration Hardening",{"name":79},{"id":143,"name":144,"tactic":806},{"name":84},{"id":808,"name":809,"tactics":810,"countermeasures":813},"T1562.004","Disable or Modify System Firewall",[811,812],{"id":35,"name":36},{"id":38,"name":39},[814,816],{"id":134,"name":135,"tactic":815},{"name":137},{"id":143,"name":144,"tactic":817},{"name":84},{"id":819,"name":820,"tactics":821,"countermeasures":824},"T1562.007","Disable or Modify Cloud Firewall",[822,823],{"id":35,"name":36},{"id":38,"name":39},[825,827],{"id":134,"name":135,"tactic":826},{"name":137},{"id":143,"name":144,"tactic":828},{"name":84},{"id":830,"name":831,"tactics":832,"countermeasures":835},"T1562.008","Disable or Modify Cloud Logs",[833,834],{"id":35,"name":36},{"id":38,"name":39},[836,838],{"id":134,"name":135,"tactic":837},{"name":137},{"id":143,"name":144,"tactic":839},{"name":84},{"id":841,"name":842,"tactics":843,"countermeasures":846},"T1562.009","Safe Mode Boot",[844,845],{"id":35,"name":36},{"id":38,"name":39},[847,849,851,853],{"id":134,"name":135,"tactic":848},{"name":137},{"id":139,"name":140,"tactic":850},{"name":56},{"id":143,"name":144,"tactic":852},{"name":84},{"id":99,"name":100,"tactic":854},{"name":89},[],[857],"GHSA-wxr5-93ph-8wr9",[],[860,862,864,866,868,870,872,874,876,878,880,882,884,886,888,890,892,894,896,898,900,902,904,906,908,910,912,914,916],{"_key":861},"SUSE-SU-2025:02056-1",{"_key":863},"SUSE-SU-2025:01815-1",{"_key":865},"DLA-4229-1",{"_key":867},"OPENSUSE-SU-2025:15175-1",{"_key":869},"MGASA-2025-0299",{"_key":871},"DEBIAN-CVE-2025-48734",{"_key":873},"RHSA-2025:10814",{"_key":875},"RHSA-2025:15810",{"_key":877},"RHSA-2025:15811",{"_key":879},"RHSA-2025:15812",{"_key":881},"RHSA-2025:15813",{"_key":883},"RHSA-2025:15814",{"_key":885},"RHSA-2025:15815",{"_key":887},"RHSA-2025:15816",{"_key":889},"RHSA-2025:15817",{"_key":891},"RHSA-2025:16667",{"_key":893},"RHSA-2025:9114",{"_key":895},"RHSA-2025:9115",{"_key":897},"RHSA-2025:9166",{"_key":899},"RHSA-2025:9696",{"_key":901},"RHSA-2025:9318",{"_key":903},"USN-8322-1",{"_key":905},"UBUNTU-CVE-2025-48734",{"_key":907},"RHSA-2025:10452",{"_key":909},"RHSA-2025:10453",{"_key":911},"RHSA-2025:10924",{"_key":913},"RHSA-2025:10925",{"_key":915},"RHSA-2025:10926",{"_key":917},"RHSA-2025:16668",[],[920,921,922,923,924,926,928,930,932,934,936,938,940,942,944,946,948,950],{"_key":861},{"_key":863},{"_key":867},{"_key":869},{"_key":925},"CGA-4M3V-9FM7-3827",{"_key":927},"CGA-4VXJ-FFHJ-XX7V",{"_key":929},"CGA-6294-J3WV-P997",{"_key":931},"CGA-65C9-4G2C-373P",{"_key":933},"CGA-833R-VWC8-62F8",{"_key":935},"CGA-H6G7-PXCX-M22Q",{"_key":937},"CGA-H73M-GFRJ-3J4V",{"_key":939},"CGA-HG4R-WGGG-WV2R",{"_key":941},"CGA-JQX3-WWGP-2R3G",{"_key":943},"CGA-MH8P-6RR9-XRHF",{"_key":945},"CGA-Q9P5-PGM4-HW27",{"_key":947},"CGA-WRW4-QFP6-7H6X",{"_key":949},"CGA-XRG4-FGJ3-F9VQ",{"_key":951},"CGA-CCC8-656H-RC37","2025-05-28T13:32:08.300Z","2026-04-29T03:55:27.335Z","Modified",{"cisa_kev":956,"cisa_ransomware":956,"cisa_vendor":9,"epss_severity":957,"epss_score":958,"severity":959,"severity_score":960,"severity_version":961,"severity_source":962,"severity_vector":963,"severity_status":954},false,"low",0.00258,"high",8.8,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[965,974,979,983,988,992],{"url":966,"sources":967,"tags":970},"https://lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9",[962,968,969],"nvd","osv_maven",[971,972,973],"Vendor Advisory","Mailing List","WEB",{"url":975,"sources":976,"tags":977},"http://www.openwall.com/lists/oss-security/2025/05/28/6",[962,968,969],[972,978,973],"Third Party Advisory",{"url":980,"sources":981,"tags":982},"https://lists.debian.org/debian-lts-announce/2025/06/msg00027.html",[962,968,969],[973],{"url":984,"sources":985,"tags":986},"https://nvd.nist.gov/vuln/detail/CVE-2025-48734",[969],[987],"Advisory",{"url":989,"sources":990,"tags":991},"https://github.com/apache/commons-beanutils/commit/bd20740da25b69552ddef8523beec0837297eaf9",[969],[973],{"url":993,"sources":994,"tags":995},"https://github.com/apache/commons-beanutils",[969],[996],"PACKAGE",[],{"date":999,"score":958,"percentile":1000},"2026-06-04",0.4944,[1002,1006,1010,1013,1016,1018,1021,1024,1027,1030,1033,1036,1039,1042,1045,1049,1053,1056,1059,1062,1065,1068,1071,1074,1077,1080,1083,1086,1089,1092,1095,1098,1101,1104,1107,1110,1113,1116,1119,1122,1125,1128,1131,1133,1136,1139,1142,1145,1148,1152,1155,1158,1161,1164,1167,1170,1173,1176,1179,1183,1186,1189,1193,1196,1199,1202,1205,1208,1211,1214,1217,1220,1223,1226,1229,1232,1235,1238,1241,1244,1248,1251,1253,1256,1259,1262,1265,1268,1271,1275],{"date":1003,"score":1004,"percentile":1005},"2025-11-04",0.00049,0.15041,{"date":1007,"score":1008,"percentile":1009},"2025-11-05",0.00059,0.18388,{"date":1011,"score":1008,"percentile":1012},"2025-11-06",0.18355,{"date":1014,"score":1008,"percentile":1015},"2025-11-07",0.18374,{"date":1017,"score":1008,"percentile":1015},"2025-11-08",{"date":1019,"score":1008,"percentile":1020},"2025-11-09",0.18349,{"date":1022,"score":1008,"percentile":1023},"2025-11-10",0.18309,{"date":1025,"score":1008,"percentile":1026},"2025-11-11",0.18316,{"date":1028,"score":1008,"percentile":1029},"2025-11-12",0.18354,{"date":1031,"score":1008,"percentile":1032},"2025-11-13",0.18384,{"date":1034,"score":1008,"percentile":1035},"2025-11-14",0.18378,{"date":1037,"score":1008,"percentile":1038},"2025-11-15",0.18359,{"date":1040,"score":1008,"percentile":1041},"2025-11-16",0.18321,{"date":1043,"score":1008,"percentile":1044},"2025-11-17",0.18286,{"date":1046,"score":1047,"percentile":1048},"2025-11-18",0.0045,0.60946,{"date":1050,"score":1051,"percentile":1052},"2025-11-19",0.00048,0.10138,{"date":1054,"score":1051,"percentile":1055},"2025-11-20",0.10162,{"date":1057,"score":1008,"percentile":1058},"2025-11-21",0.18285,{"date":1060,"score":1051,"percentile":1061},"2025-11-22",0.14662,{"date":1063,"score":1051,"percentile":1064},"2025-11-23",0.14645,{"date":1066,"score":1008,"percentile":1067},"2025-11-24",0.18231,{"date":1069,"score":1008,"percentile":1070},"2025-11-25",0.18219,{"date":1072,"score":1008,"percentile":1073},"2025-11-26",0.18209,{"date":1075,"score":1008,"percentile":1076},"2025-11-27",0.1821,{"date":1078,"score":1051,"percentile":1079},"2025-11-28",0.14526,{"date":1081,"score":1051,"percentile":1082},"2025-11-29",0.14514,{"date":1084,"score":1051,"percentile":1085},"2025-11-30",0.14519,{"date":1087,"score":1008,"percentile":1088},"2025-12-01",0.18235,{"date":1090,"score":1008,"percentile":1091},"2025-12-02",0.18243,{"date":1093,"score":1008,"percentile":1094},"2025-12-03",0.18256,{"date":1096,"score":1051,"percentile":1097},"2025-12-04",0.14569,{"date":1099,"score":1051,"percentile":1100},"2025-12-05",0.14631,{"date":1102,"score":1051,"percentile":1103},"2025-12-06",0.14648,{"date":1105,"score":1051,"percentile":1106},"2025-12-07",0.14628,{"date":1108,"score":1051,"percentile":1109},"2025-12-08",0.14637,{"date":1111,"score":1051,"percentile":1112},"2025-12-09",0.14695,{"date":1114,"score":1051,"percentile":1115},"2025-12-10",0.14769,{"date":1117,"score":1051,"percentile":1118},"2025-12-11",0.14794,{"date":1120,"score":1051,"percentile":1121},"2025-12-12",0.14841,{"date":1123,"score":1051,"percentile":1124},"2025-12-13",0.14849,{"date":1126,"score":1051,"percentile":1127},"2025-12-14",0.14803,{"date":1129,"score":1051,"percentile":1130},"2025-12-15",0.14767,{"date":1132,"score":1051,"percentile":1118},"2025-12-16",{"date":1134,"score":1051,"percentile":1135},"2025-12-17",0.1489,{"date":1137,"score":1051,"percentile":1138},"2025-12-18",0.14949,{"date":1140,"score":1051,"percentile":1141},"2025-12-19",0.14989,{"date":1143,"score":1051,"percentile":1144},"2025-12-20",0.14963,{"date":1146,"score":1051,"percentile":1147},"2025-12-21",0.14929,{"date":1149,"score":1150,"percentile":1151},"2025-12-22",0.0006,0.19033,{"date":1153,"score":1150,"percentile":1154},"2025-12-23",0.19034,{"date":1156,"score":1150,"percentile":1157},"2025-12-24",0.19072,{"date":1159,"score":1150,"percentile":1160},"2025-12-25",0.19152,{"date":1162,"score":1150,"percentile":1163},"2025-12-26",0.19151,{"date":1165,"score":1150,"percentile":1166},"2025-12-27",0.19146,{"date":1168,"score":1150,"percentile":1169},"2025-12-28",0.19105,{"date":1171,"score":1150,"percentile":1172},"2025-12-29",0.19058,{"date":1174,"score":1150,"percentile":1175},"2025-12-30",0.19062,{"date":1177,"score":1150,"percentile":1178},"2025-12-31",0.19124,{"date":1180,"score":1181,"percentile":1182},"2026-01-01",0.00095,0.27174,{"date":1184,"score":1181,"percentile":1185},"2026-01-02",0.27173,{"date":1187,"score":1181,"percentile":1188},"2026-01-03",0.27154,{"date":1190,"score":1191,"percentile":1192},"2026-01-04",0.00077,0.23316,{"date":1194,"score":1191,"percentile":1195},"2026-01-05",0.23294,{"date":1197,"score":1191,"percentile":1198},"2026-01-06",0.23305,{"date":1200,"score":1191,"percentile":1201},"2026-01-07",0.23341,{"date":1203,"score":1191,"percentile":1204},"2026-01-08",0.23387,{"date":1206,"score":1191,"percentile":1207},"2026-01-09",0.23375,{"date":1209,"score":1191,"percentile":1210},"2026-01-10",0.2336,{"date":1212,"score":1191,"percentile":1213},"2026-01-11",0.23332,{"date":1215,"score":1191,"percentile":1216},"2026-01-12",0.23298,{"date":1218,"score":1191,"percentile":1219},"2026-01-13",0.23275,{"date":1221,"score":1191,"percentile":1222},"2026-01-14",0.23334,{"date":1224,"score":1191,"percentile":1225},"2026-01-15",0.23328,{"date":1227,"score":1191,"percentile":1228},"2026-01-16",0.23359,{"date":1230,"score":1191,"percentile":1231},"2026-01-17",0.23357,{"date":1233,"score":1191,"percentile":1234},"2026-01-18",0.23304,{"date":1236,"score":1191,"percentile":1237},"2026-01-19",0.2326,{"date":1239,"score":1191,"percentile":1240},"2026-01-20",0.2323,{"date":1242,"score":1191,"percentile":1243},"2026-01-21",0.23186,{"date":1245,"score":1246,"percentile":1247},"2026-01-22",0.00063,0.19682,{"date":1249,"score":1246,"percentile":1250},"2026-01-23",0.19778,{"date":1252,"score":1191,"percentile":1219},"2026-01-24",{"date":1254,"score":1191,"percentile":1255},"2026-01-25",0.2319,{"date":1257,"score":1191,"percentile":1258},"2026-01-26",0.23087,{"date":1260,"score":1191,"percentile":1261},"2026-01-27",0.23077,{"date":1263,"score":1191,"percentile":1264},"2026-01-28",0.23078,{"date":1266,"score":1191,"percentile":1267},"2026-01-29",0.23034,{"date":1269,"score":1191,"percentile":1270},"2026-01-30",0.23031,{"date":1272,"score":1273,"percentile":1274},"2026-01-31",0.00084,0.24637,{"date":1276,"score":1277,"percentile":1278},"2026-02-01",0.00104,0.28807,[1280,1285,1287],{"source":962,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1281,"cvss_v4_0":9},{"baseScore":960,"baseSeverity":1282,"vectorString":963,"impactScore":1283,"exploitabilityScore":1284},"HIGH",9.8,7.2,{"source":968,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1286,"cvss_v4_0":9},{"baseScore":960,"baseSeverity":1282,"vectorString":963,"impactScore":1283,"exploitabilityScore":1284},{"source":969,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1288,"cvss_v4_0":9},{"baseScore":960,"baseSeverity":9,"vectorString":963,"impactScore":1283,"exploitabilityScore":1284},[1290,1303,1311,1321,1330],{"ecosystem":9,"name":1291,"vendor":1292,"product":1293,"cpe_part":1294,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1295},"Apache Commons BeanUtils 1.x","apache software foundation","apache commons beanutils 1.x","a",[1296],{"version":1297,"is_range":1298,"range_type":962,"version_start":1299,"version_start_type":1300,"version_end":1301,"version_end_type":1302,"fixed_in":9},">= 1.0, \u003C 1.11.0",true,"1.0","including","1.11.0","excluding",{"ecosystem":9,"name":1304,"vendor":1292,"product":1305,"cpe_part":1294,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1306},"Apache Commons BeanUtils 2.x","apache commons beanutils 2.x",[1307],{"version":1308,"is_range":1298,"range_type":962,"version_start":1309,"version_start_type":1300,"version_end":1310,"version_end_type":1302,"fixed_in":9},">= 2.0.0-M1, \u003C 2.0.0-M2","2.0.0-M1","2.0.0-M2",{"ecosystem":9,"name":1312,"vendor":1313,"product":1314,"cpe_part":1294,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1315},"commons beanutils","apache","commons_beanutils",[1316,1319],{"version":1317,"is_range":1298,"range_type":1318,"version_start":1299,"version_start_type":1300,"version_end":1301,"version_end_type":1302,"fixed_in":9},"gte1.0_lt1.11.0","cpe",{"version":1320,"is_range":956,"range_type":1318,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.0.0:milestone1",{"ecosystem":1322,"name":1323,"vendor":1324,"product":1324,"cpe_part":9,"purl_type":1325,"purl_namespace":1324,"purl_name":1324,"source":9,"versions":1326},"Maven","commons-beanutils:commons-beanutils","commons-beanutils","maven",[1327],{"version":1328,"is_range":1298,"range_type":1329,"version_start":1299,"version_start_type":1300,"version_end":1301,"version_end_type":1302,"fixed_in":9},"gte1_0_lt1_11_0","ecosystem",{"ecosystem":1322,"name":1331,"vendor":1332,"product":1333,"cpe_part":9,"purl_type":1325,"purl_namespace":1332,"purl_name":1333,"source":9,"versions":1334},"org.apache.commons:commons-beanutils2","org.apache.commons","commons-beanutils2",[1335],{"version":1336,"is_range":1298,"range_type":1329,"version_start":1309,"version_start_type":1300,"version_end":1310,"version_end_type":1302,"fixed_in":9},"gte2_0_0_M1_lt2_0_0_M2"]