Every CVE whose affected-product data names Codelibs Fess, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2018-1000822 — CVSS 10.0 (critical): codelibs fess version before commit faa265b contains a XML External Entity (XXE) vulnerability in GSA XML file parser that can result in…
CVE-2025-48382 — CVSS 5.5 (medium): Fess is a deployable Enterprise Search Server. Prior to version 14.19.2, the createTempFile() method in org.codelibs.fess.helper.SystemHelpe…