The probability is the direct output of the EPSS model, and conveys an overall sense of the threat of exploitation in the wild. The percentile measures the EPSS probability relative to all known EPSS scores. Note: This data is updated daily, relying on the latest available EPSS model version. Check out the EPSS documentation for more details.
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsorg.igniterealtime.smack:smack-tcp
Affected versions of the package are vulnerable to Man-in-the-Middle (MitM) attacks because the security of the TLS connection is not always enforced. When the SecurityMode.required
TLS setting has been set, allows man-in-the-middle attackers to bypass TLS protections and trigger use of cleartext for client authentication by stripping the starttls
feature from a server response.