Lightrun
question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Large number of false positives for New Relic Java Agent

See original GitHub issue

Our software bundles the New Relic Java Agent. Its analysis triggers a lot of false positives. Version we’re currently using i.c.w. the Maven plugin:

<dependency>
   <groupId>com.newrelic.agent.java</groupId>
   <artifactId>newrelic-agent</artifactId>
   <version>3.40.0</version>
</dependency>

CLI-based reproduction script:

#!/bin/sh

curl -o /tmp/newrelic-agent.jar \
  https://repo1.maven.org/maven2/com/newrelic/agent/java/newrelic-agent/3.40.0/newrelic-agent-3.40.0.jar
bin/dependency-check.sh --project 'New Relic Agent' --out /tmp --format XML --scan /tmp/newrelic-agent.jar
xmlstarlet sel -T -N 'x=https://jeremylong.github.io/DependencyCheck/dependency-check.1.5.xsd' \
  -t -m '//x:vulnerability' -v 'concat(x:name, " - ", ../../x:fileName)' -nl \
  /tmp/dependency-check-report.xml | sort -u

The checker identifies the instrumentation files bundled inside the agent (each in their own JAR, for different versions of the various target libraries) as “the real deal”:

Script output. 
CVE-2000-1210 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2001-0407 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2001-0509 - newrelic-agent.jar: jdbc-sqlserver-1.0.jar
CVE-2001-0590 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2001-1274 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2001-1275 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2001-1454 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2002-0493 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2003-1331 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2004-0457 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2004-0835 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2004-0836 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2004-0837 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2005-3510 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2005-4838 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2005-4838 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2006-3486 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2006-3486 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2006-4226 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2006-4226 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2006-7196 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2006-7196 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2006-7232 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2006-7232 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2006-7232 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2007-0450 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2007-0450 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2007-0556 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2007-0556 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2007-1358 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2007-1420 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2007-1858 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2007-2138 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2007-2138 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2007-2449 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2007-2449 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2007-2450 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2007-2582 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2007-2583 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2007-2691 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2007-2691 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2007-2691 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2007-2692 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2007-2692 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2007-3382 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2007-3385 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2007-3386 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2007-3676 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2007-4772 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2007-4772 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2007-5090 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2007-5090 - newrelic-agent.jar: jdbc-sqlserver-1.0.jar
CVE-2007-5333 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2007-5652 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2007-5925 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2007-5925 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2007-5925 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2007-5970 - newrelic-agent.jar: jdbc-mysql-6.0.2-1.0.jar
CVE-2007-6303 - newrelic-agent.jar: jdbc-mysql-6.0.2-1.0.jar
CVE-2007-6304 - newrelic-agent.jar: jdbc-mysql-6.0.2-1.0.jar
CVE-2008-0128 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2008-0128 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2008-0226 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2008-0226 - newrelic-agent.jar: jdbc-mysql-6.0.2-1.0.jar
CVE-2008-0226 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2008-0226 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2008-0699 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2008-1232 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2008-1998 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2008-2079 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2008-2079 - newrelic-agent.jar: jdbc-mysql-6.0.2-1.0.jar
CVE-2008-2079 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2008-2079 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2008-2370 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2008-2462 - newrelic-agent.jar: resin-3-1.0.jar
CVE-2008-3958 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2008-3959 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2008-3963 - newrelic-agent.jar: jdbc-mysql-6.0.2-1.0.jar
CVE-2008-3963 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2008-3963 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2008-4098 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2008-4098 - newrelic-agent.jar: jdbc-mysql-6.0.2-1.0.jar
CVE-2008-4098 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2008-4098 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2008-4691 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2008-4692 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2008-4693 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2008-5515 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2008-5519 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2008-7247 - newrelic-agent.jar: jdbc-mysql-6.0.2-1.0.jar
CVE-2008-7247 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2008-7247 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2009-0033 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2009-0580 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2009-0781 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2009-0783 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2009-0819 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2009-0819 - newrelic-agent.jar: jdbc-mysql-6.0.2-1.0.jar
CVE-2009-0819 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2009-0819 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2009-1239 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2009-1905 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2009-2693 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2009-2696 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2009-2858 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2009-2859 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2009-2860 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2009-2901 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2009-2902 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2009-3548 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2009-3821 - newrelic-agent.jar: solr-1.4.0-1.0.jar
CVE-2009-3821 - newrelic-agent.jar: solr-3.1.0-1.0.jar
CVE-2009-3821 - newrelic-agent.jar: solr-3.5.0-1.0.jar
CVE-2009-3821 - newrelic-agent.jar: solr-3.6.0-1.0.jar
CVE-2009-3821 - newrelic-agent.jar: solr-4.0.0-1.0.jar
CVE-2009-3821 - newrelic-agent.jar: solr-5.0.0-1.0.jar
CVE-2009-3821 - newrelic-agent.jar: solr-5.1.0-1.0.jar
CVE-2009-3821 - newrelic-agent.jar: solr-5.4.0-1.0.jar
CVE-2009-3821 - newrelic-agent.jar: solr-6.4.0-1.0.jar
CVE-2009-4019 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2009-4019 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2009-4028 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2009-4028 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2009-4028 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2009-4030 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2009-4030 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2009-4269 - newrelic-agent.jar: jdbc-embedded-derby-10.2.1.6-1.0.jar
CVE-2009-5026 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2009-5026 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-0733 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2010-0733 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2010-1151 - newrelic-agent.jar: solr-1.4.0-1.0.jar
CVE-2010-1151 - newrelic-agent.jar: solr-3.1.0-1.0.jar
CVE-2010-1151 - newrelic-agent.jar: solr-3.5.0-1.0.jar
CVE-2010-1151 - newrelic-agent.jar: solr-3.6.0-1.0.jar
CVE-2010-1151 - newrelic-agent.jar: solr-4.0.0-1.0.jar
CVE-2010-1157 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2010-1560 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2010-1621 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2010-1621 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-1621 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-1626 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2010-1626 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-1626 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-1848 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-1848 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-1849 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-1849 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-1850 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-1850 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-2008 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2010-2008 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-2008 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-2227 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2010-3676 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-3676 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-3677 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2010-3677 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-3677 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-3678 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-3678 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-3679 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-3679 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-3680 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-3680 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-3681 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-3681 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-3682 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2010-3682 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-3682 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-3683 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-3683 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-3718 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2010-3833 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-3833 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-3834 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-3834 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-3835 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-3835 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-3836 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-3836 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-3837 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-3837 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-3838 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-3838 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-3839 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-3839 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2010-3840 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2010-3840 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2011-0013 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2011-0731 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2011-0757 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2011-1184 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2011-1373 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2011-1498 - newrelic-agent.jar: solr-4.0.0-1.0.jar
CVE-2011-1846 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2011-1847 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2011-2204 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2011-2262 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2011-2262 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2011-2526 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2011-3190 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2011-5062 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2011-5063 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2011-5064 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2012-0022 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2012-0075 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0075 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0087 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0087 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0101 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0101 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0102 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0102 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0112 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0112 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0113 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0113 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0114 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0114 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0115 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0115 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0116 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0116 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0118 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0118 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0119 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0119 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0120 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0120 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0484 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0484 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0485 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0485 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0490 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0490 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0492 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0492 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0540 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0540 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0553 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0553 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0572 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0572 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0574 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0574 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0583 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0583 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-0882 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-0882 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-1688 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-1688 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-1689 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-1689 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-1690 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-1690 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-1696 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-1696 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-1697 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-1697 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-1702 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-1702 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-1703 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-1703 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-1705 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-1705 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-1734 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-1734 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-1856 - newrelic-agent.jar: jdbc-sqlserver-1.0.jar
CVE-2012-2102 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-2102 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-2552 - newrelic-agent.jar: jdbc-sqlserver-1.0.jar
CVE-2012-2749 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-2749 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-2965 - newrelic-agent.jar: resin-3-1.0.jar
CVE-2012-2966 - newrelic-agent.jar: resin-3-1.0.jar
CVE-2012-2967 - newrelic-agent.jar: resin-3-1.0.jar
CVE-2012-2968 - newrelic-agent.jar: resin-3-1.0.jar
CVE-2012-2969 - newrelic-agent.jar: resin-3-1.0.jar
CVE-2012-3150 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-3150 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-3158 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-3158 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-3160 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-3160 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-3163 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-3163 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-3166 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-3166 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-3167 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-3167 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-3173 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-3173 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-3177 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-3177 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-3180 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-3180 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-3197 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-3197 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-3324 - newrelic-agent.jar: jdbc-db2-1.0.jar
CVE-2012-5060 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-5060 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-5568 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2012-5568 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2012-5575 - newrelic-agent.jar: cxf-2.7-1.0.jar
CVE-2012-5627 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2012-5627 - newrelic-agent.jar: jdbc-mysql-6.0.2-1.0.jar
CVE-2012-5627 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2012-5627 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2012-5633 - newrelic-agent.jar: cxf-2.7-1.0.jar
CVE-2012-5783 - newrelic-agent.jar: httpclient-3.0-1.0.jar
CVE-2012-5786 - newrelic-agent.jar: cxf-2.7-1.0.jar
CVE-2012-5885 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2012-5886 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2012-5887 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2012-6153 - newrelic-agent.jar: httpclient-3.0-1.0.jar
CVE-2012-6153 - newrelic-agent.jar: httpclient-3.1-1.0.jar
CVE-2012-6153 - newrelic-agent.jar: solr-1.4.0-1.0.jar
CVE-2012-6153 - newrelic-agent.jar: solr-3.1.0-1.0.jar
CVE-2012-6153 - newrelic-agent.jar: solr-3.5.0-1.0.jar
CVE-2012-6153 - newrelic-agent.jar: solr-3.6.0-1.0.jar
CVE-2012-6612 - newrelic-agent.jar: solr-1.4.0-1.0.jar
CVE-2012-6612 - newrelic-agent.jar: solr-3.1.0-1.0.jar
CVE-2012-6612 - newrelic-agent.jar: solr-3.5.0-1.0.jar
CVE-2012-6612 - newrelic-agent.jar: solr-3.6.0-1.0.jar
CVE-2012-6612 - newrelic-agent.jar: solr-4.0.0-1.0.jar
CVE-2012-6612 - newrelic-agent.jar: solr-5.0.0-1.0.jar
CVE-2012-6612 - newrelic-agent.jar: solr-5.1.0-1.0.jar
CVE-2012-6612 - newrelic-agent.jar: solr-5.4.0-1.0.jar
CVE-2012-6612 - newrelic-agent.jar: solr-6.4.0-1.0.jar
CVE-2013-0239 - newrelic-agent.jar: cxf-2.7-1.0.jar
CVE-2013-0375 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2013-0375 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-0375 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-0383 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-0383 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-0384 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-0384 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-0385 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-0385 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-0389 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-0389 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-1492 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-1492 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-1506 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-1506 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-1521 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-1521 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-1548 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-1548 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-1552 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-1552 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-1555 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-1555 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-1768 - newrelic-agent.jar: openjpa-1.0-1.0.jar
CVE-2013-2160 - newrelic-agent.jar: cxf-2.7-1.0.jar
CVE-2013-2185 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2013-2185 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2013-2378 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-2378 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-2389 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-2389 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-2391 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-2391 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-2392 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-2392 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-3802 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-3802 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-3804 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-3804 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-3808 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-3808 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-4286 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2013-4286 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2013-4322 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2013-4322 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2013-4444 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2013-4444 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2013-4590 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2013-4590 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2013-5908 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2013-5908 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2013-6357 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2013-6357 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2013-6397 - newrelic-agent.jar: solr-1.4.0-1.0.jar
CVE-2013-6397 - newrelic-agent.jar: solr-3.1.0-1.0.jar
CVE-2013-6397 - newrelic-agent.jar: solr-3.5.0-1.0.jar
CVE-2013-6397 - newrelic-agent.jar: solr-3.6.0-1.0.jar
CVE-2013-6397 - newrelic-agent.jar: solr-4.0.0-1.0.jar
CVE-2013-6397 - newrelic-agent.jar: solr-5.0.0-1.0.jar
CVE-2013-6397 - newrelic-agent.jar: solr-5.1.0-1.0.jar
CVE-2013-6397 - newrelic-agent.jar: solr-5.4.0-1.0.jar
CVE-2013-6397 - newrelic-agent.jar: solr-6.4.0-1.0.jar
CVE-2013-6407 - newrelic-agent.jar: solr-1.4.0-1.0.jar
CVE-2013-6407 - newrelic-agent.jar: solr-3.1.0-1.0.jar
CVE-2013-6407 - newrelic-agent.jar: solr-3.5.0-1.0.jar
CVE-2013-6407 - newrelic-agent.jar: solr-3.6.0-1.0.jar
CVE-2013-6407 - newrelic-agent.jar: solr-4.0.0-1.0.jar
CVE-2013-6407 - newrelic-agent.jar: solr-5.0.0-1.0.jar
CVE-2013-6407 - newrelic-agent.jar: solr-5.1.0-1.0.jar
CVE-2013-6407 - newrelic-agent.jar: solr-5.4.0-1.0.jar
CVE-2013-6407 - newrelic-agent.jar: solr-6.4.0-1.0.jar
CVE-2013-6408 - newrelic-agent.jar: solr-1.4.0-1.0.jar
CVE-2013-6408 - newrelic-agent.jar: solr-3.1.0-1.0.jar
CVE-2013-6408 - newrelic-agent.jar: solr-3.5.0-1.0.jar
CVE-2013-6408 - newrelic-agent.jar: solr-3.6.0-1.0.jar
CVE-2013-6408 - newrelic-agent.jar: solr-4.0.0-1.0.jar
CVE-2013-6408 - newrelic-agent.jar: solr-5.0.0-1.0.jar
CVE-2013-6408 - newrelic-agent.jar: solr-5.1.0-1.0.jar
CVE-2013-6408 - newrelic-agent.jar: solr-5.4.0-1.0.jar
CVE-2013-6408 - newrelic-agent.jar: solr-6.4.0-1.0.jar
CVE-2014-0001 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2014-0001 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2014-0001 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2014-0001 - newrelic-agent.jar: jdbc-mysql-6.0.2-1.0.jar
CVE-2014-0001 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2014-0001 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2014-0034 - newrelic-agent.jar: cxf-2.7-1.0.jar
CVE-2014-0035 - newrelic-agent.jar: cxf-2.7-1.0.jar
CVE-2014-0060 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2014-0060 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2014-0061 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2014-0061 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2014-0062 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2014-0062 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2014-0063 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2014-0063 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2014-0064 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2014-0064 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2014-0065 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2014-0065 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2014-0066 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2014-0066 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2014-0067 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2014-0067 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2014-0075 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2014-0075 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2014-0096 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2014-0096 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2014-0099 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2014-0099 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2014-0109 - newrelic-agent.jar: cxf-2.7-1.0.jar
CVE-2014-0110 - newrelic-agent.jar: cxf-2.7-1.0.jar
CVE-2014-0119 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2014-0119 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2014-0386 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2014-0386 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2014-0393 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2014-0393 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2014-0401 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2014-0401 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2014-0402 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2014-0402 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2014-0412 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2014-0412 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2014-0437 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2014-0437 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2014-2966 - newrelic-agent.jar: resin-3-1.0.jar
CVE-2014-3577 - newrelic-agent.jar: httpclient-3.0-1.0.jar
CVE-2014-3577 - newrelic-agent.jar: httpclient-3.1-1.0.jar
CVE-2014-3577 - newrelic-agent.jar: solr-1.4.0-1.0.jar
CVE-2014-3577 - newrelic-agent.jar: solr-3.1.0-1.0.jar
CVE-2014-3577 - newrelic-agent.jar: solr-3.5.0-1.0.jar
CVE-2014-3577 - newrelic-agent.jar: solr-3.6.0-1.0.jar
CVE-2014-3577 - newrelic-agent.jar: solr-4.0.0-1.0.jar
CVE-2014-3581 - newrelic-agent.jar: solr-1.4.0-1.0.jar
CVE-2014-3584 - newrelic-agent.jar: cxf-2.7-1.0.jar
CVE-2014-3623 - newrelic-agent.jar: cxf-2.7-1.0.jar
CVE-2014-4061 - newrelic-agent.jar: jdbc-sqlserver-1.0.jar
CVE-2014-6464 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2014-6464 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2014-6469 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2014-6469 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2014-6491 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2014-6491 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2014-6494 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2014-6494 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2014-6496 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2014-6496 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2014-6500 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2014-6500 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2014-6507 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2014-6507 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2014-6559 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2014-6559 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2014-8180 - newrelic-agent.jar: mongodb-2.12-1.0.jar
CVE-2014-8180 - newrelic-agent.jar: mongodb-2.14-1.0.jar
CVE-2014-8180 - newrelic-agent.jar: mongodb-3.0-1.0.jar
CVE-2014-8180 - newrelic-agent.jar: mongodb-3.1-1.0.jar
CVE-2015-1761 - newrelic-agent.jar: jdbc-sqlserver-1.0.jar
CVE-2015-1762 - newrelic-agent.jar: jdbc-sqlserver-1.0.jar
CVE-2015-1763 - newrelic-agent.jar: jdbc-sqlserver-1.0.jar
CVE-2015-1832 - newrelic-agent.jar: jdbc-embedded-derby-10.10.1.1-1.0.jar
CVE-2015-1832 - newrelic-agent.jar: jdbc-embedded-derby-10.11.1.1-1.0.jar
CVE-2015-1832 - newrelic-agent.jar: jdbc-embedded-derby-10.2.1.6-1.0.jar
CVE-2015-2575 - newrelic-agent.jar: jdbc-mysql-3.0.8-1.0.jar
CVE-2015-2575 - newrelic-agent.jar: jdbc-mysql-connection-5.1.4-1.0.jar
CVE-2015-2575 - newrelic-agent.jar: jdbc-mysql-multihost-connections-5.1.3-1.0.jar
CVE-2015-3152 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2015-3152 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2015-3165 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2015-3165 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2015-3254 - newrelic-agent.jar: thrift-0.8-1.0.jar
CVE-2015-5253 - newrelic-agent.jar: cxf-2.7-1.0.jar
CVE-2015-5262 - newrelic-agent.jar: httpclient-3.0-1.0.jar
CVE-2015-5262 - newrelic-agent.jar: httpclient-3.1-1.0.jar
CVE-2015-5262 - newrelic-agent.jar: solr-1.4.0-1.0.jar
CVE-2015-5262 - newrelic-agent.jar: solr-3.1.0-1.0.jar
CVE-2015-5262 - newrelic-agent.jar: solr-3.5.0-1.0.jar
CVE-2015-5262 - newrelic-agent.jar: solr-3.6.0-1.0.jar
CVE-2015-5262 - newrelic-agent.jar: solr-4.0.0-1.0.jar
CVE-2015-5288 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2015-5288 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2015-5289 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2015-5289 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2015-8795 - newrelic-agent.jar: solr-1.4.0-1.0.jar
CVE-2015-8795 - newrelic-agent.jar: solr-3.1.0-1.0.jar
CVE-2015-8795 - newrelic-agent.jar: solr-3.5.0-1.0.jar
CVE-2015-8795 - newrelic-agent.jar: solr-3.6.0-1.0.jar
CVE-2015-8795 - newrelic-agent.jar: solr-4.0.0-1.0.jar
CVE-2015-8795 - newrelic-agent.jar: solr-5.0.0-1.0.jar
CVE-2015-8795 - newrelic-agent.jar: solr-5.1.0-1.0.jar
CVE-2015-8795 - newrelic-agent.jar: solr-5.4.0-1.0.jar
CVE-2015-8795 - newrelic-agent.jar: solr-6.4.0-1.0.jar
CVE-2015-8796 - newrelic-agent.jar: solr-1.4.0-1.0.jar
CVE-2015-8796 - newrelic-agent.jar: solr-3.1.0-1.0.jar
CVE-2015-8796 - newrelic-agent.jar: solr-3.5.0-1.0.jar
CVE-2015-8796 - newrelic-agent.jar: solr-3.6.0-1.0.jar
CVE-2015-8796 - newrelic-agent.jar: solr-4.0.0-1.0.jar
CVE-2015-8796 - newrelic-agent.jar: solr-5.0.0-1.0.jar
CVE-2015-8796 - newrelic-agent.jar: solr-5.1.0-1.0.jar
CVE-2015-8796 - newrelic-agent.jar: solr-5.4.0-1.0.jar
CVE-2015-8796 - newrelic-agent.jar: solr-6.4.0-1.0.jar
CVE-2015-8797 - newrelic-agent.jar: solr-1.4.0-1.0.jar
CVE-2015-8797 - newrelic-agent.jar: solr-3.1.0-1.0.jar
CVE-2015-8797 - newrelic-agent.jar: solr-3.5.0-1.0.jar
CVE-2015-8797 - newrelic-agent.jar: solr-3.6.0-1.0.jar
CVE-2015-8797 - newrelic-agent.jar: solr-4.0.0-1.0.jar
CVE-2015-8797 - newrelic-agent.jar: solr-5.0.0-1.0.jar
CVE-2015-8797 - newrelic-agent.jar: solr-5.1.0-1.0.jar
CVE-2015-8797 - newrelic-agent.jar: solr-5.4.0-1.0.jar
CVE-2015-8797 - newrelic-agent.jar: solr-6.4.0-1.0.jar
CVE-2016-0505 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0505 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0546 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0546 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0596 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0596 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0597 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0597 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0598 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0598 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0600 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0600 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0606 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0606 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0608 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0608 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0609 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0609 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0610 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0610 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0616 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0616 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0640 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0640 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0641 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0641 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0643 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0643 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0644 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0644 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0646 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0646 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0647 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0647 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0648 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0648 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0649 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0649 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0650 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0650 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0666 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-0666 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-0766 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2016-0766 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2016-0768 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2016-0768 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2016-0773 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2016-0773 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2016-3092 - newrelic-agent.jar: tomcat-8.5.0-1.0.jar
CVE-2016-3092 - newrelic-agent.jar: tomcat-8.5.2-1.0.jar
CVE-2016-3452 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-3452 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-3477 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-3477 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-3492 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-3492 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-3495 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-3495 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-3506 - newrelic-agent.jar: jdbc-ojdbc7-12.1.0.2-1.0.jar
CVE-2016-3521 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-3521 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-3615 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-3615 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5388 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2016-5388 - newrelic-agent.jar: tomcat-7.0.70-1.0.jar
CVE-2016-5388 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2016-5388 - newrelic-agent.jar: tomcat-8.5.0-1.0.jar
CVE-2016-5388 - newrelic-agent.jar: tomcat-8.5.2-1.0.jar
CVE-2016-5423 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2016-5423 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2016-5424 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2016-5424 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar
CVE-2016-5425 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2016-5425 - newrelic-agent.jar: tomcat-7.0.70-1.0.jar
CVE-2016-5425 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2016-5425 - newrelic-agent.jar: tomcat-8.5.0-1.0.jar
CVE-2016-5425 - newrelic-agent.jar: tomcat-8.5.2-1.0.jar
CVE-2016-5440 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5440 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5444 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5444 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5507 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5507 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5584 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5584 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5609 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5609 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5612 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5612 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5625 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5625 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5626 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5626 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5627 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5627 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5628 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5628 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5629 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5629 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5630 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5630 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5631 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5631 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5632 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5632 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5633 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5633 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5634 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5634 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-5635 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-5635 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-6325 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2016-6325 - newrelic-agent.jar: tomcat-7.0.70-1.0.jar
CVE-2016-6325 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2016-6325 - newrelic-agent.jar: tomcat-8.5.0-1.0.jar
CVE-2016-6325 - newrelic-agent.jar: tomcat-8.5.2-1.0.jar
CVE-2016-6494 - newrelic-agent.jar: mongodb-2.12-1.0.jar
CVE-2016-6494 - newrelic-agent.jar: mongodb-2.14-1.0.jar
CVE-2016-6494 - newrelic-agent.jar: mongodb-3.0-1.0.jar
CVE-2016-6494 - newrelic-agent.jar: mongodb-3.1-1.0.jar
CVE-2016-6662 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-6662 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-6663 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-6663 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-6664 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2016-6664 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2016-6816 - newrelic-agent.jar: tomcat-7.0.70-1.0.jar
CVE-2016-6816 - newrelic-agent.jar: tomcat-8.5.0-1.0.jar
CVE-2016-6816 - newrelic-agent.jar: tomcat-8.5.2-1.0.jar
CVE-2016-8735 - newrelic-agent.jar: tomcat-7.0.70-1.0.jar
CVE-2016-8735 - newrelic-agent.jar: tomcat-8.5.0-1.0.jar
CVE-2016-8735 - newrelic-agent.jar: tomcat-8.5.2-1.0.jar
CVE-2017-3302 - newrelic-agent.jar: jdbc-mariadb-1.1.7-1.0.jar
CVE-2017-3302 - newrelic-agent.jar: jdbc-mariadb-1.3.0-1.0.jar
CVE-2017-5647 - newrelic-agent.jar: tomcat-7.0.70-1.0.jar
CVE-2017-5647 - newrelic-agent.jar: tomcat-8.5.0-1.0.jar
CVE-2017-5647 - newrelic-agent.jar: tomcat-8.5.2-1.0.jar
CVE-2017-5648 - newrelic-agent.jar: tomcat-7.0.70-1.0.jar
CVE-2017-5648 - newrelic-agent.jar: tomcat-8.5.0-1.0.jar
CVE-2017-5648 - newrelic-agent.jar: tomcat-8.5.2-1.0.jar
CVE-2017-5650 - newrelic-agent.jar: tomcat-8.5.0-1.0.jar
CVE-2017-5650 - newrelic-agent.jar: tomcat-8.5.2-1.0.jar
CVE-2017-5651 - newrelic-agent.jar: tomcat-8.5.0-1.0.jar
CVE-2017-5651 - newrelic-agent.jar: tomcat-8.5.2-1.0.jar
CVE-2017-5653 - newrelic-agent.jar: cxf-2.7-1.0.jar
CVE-2017-5656 - newrelic-agent.jar: cxf-2.7-1.0.jar
CVE-2017-5664 - newrelic-agent.jar: tomcat-7.0.70-1.0.jar
CVE-2017-5664 - newrelic-agent.jar: tomcat-8.5.0-1.0.jar
CVE-2017-5664 - newrelic-agent.jar: tomcat-8.5.2-1.0.jar
CVE-2017-5929 - newrelic-agent.jar/META-INF/maven/ch.qos.logback/logback-classic/pom.xml
CVE-2017-5929 - newrelic-agent.jar/META-INF/maven/ch.qos.logback/logback-core/pom.xml
CVE-2017-6056 - newrelic-agent.jar: tomcat-5.5-1.0.jar
CVE-2017-6056 - newrelic-agent.jar: tomcat-7.0.70-1.0.jar
CVE-2017-6056 - newrelic-agent.jar: tomcat-7-1.0.jar
CVE-2017-6056 - newrelic-agent.jar: tomcat-8.5.0-1.0.jar
CVE-2017-6056 - newrelic-agent.jar: tomcat-8.5.2-1.0.jar
CVE-2017-7484 - newrelic-agent.jar: jdbc-postgresql-9.4.1207-1.0.jar
CVE-2017-7484 - newrelic-agent.jar: jdbc-postgresql-9.4.1208-1.0.jar

In the list above, only the warning about CVE-2017-5929, related to the properly bundled Logback dependency, seems valid.

It’d be nice if the detector could “somehow” recognize that the following bundled JARs are not the actual libraries:

JAR listing. 
$ jar tf /tmp/newrelic-agent.jar instrumentation/
instrumentation/
instrumentation/akka-2.0-1.0.jar
instrumentation/akka-2.1-1.0.jar
instrumentation/akka-2.2-1.0.jar
instrumentation/akka-http-1.0-1.0.jar
instrumentation/akka-http-2.0-M1-1.0.jar
instrumentation/akka-http-2.4.2-1.0.jar
instrumentation/akka-http-2.4.5-1.0.jar
instrumentation/akka-http-core-0.4-1.0.jar
instrumentation/akka-http-core-0.7-1.0.jar
instrumentation/akka-http-core-1.0-1.0.jar
instrumentation/anorm-2.0-1.0.jar
instrumentation/anorm-2.3-1.0.jar
instrumentation/anorm-2.4-1.0.jar
instrumentation/async-http-client-2.0.0-1.0.jar
instrumentation/aws-java-sdk-1.3.30-1.0.jar
instrumentation/aws-java-sdk-dynamodb-1.11.106-1.0.jar
instrumentation/aws-wrap-0.7.0-1.0.jar
instrumentation/cassandra-datastax-2.1.2-1.0.jar
instrumentation/cassandra-datastax-3.0.0-1.0.jar
instrumentation/cxf-2.7-1.0.jar
instrumentation/ejb-3.0-1.0.jar
instrumentation/glassfish-3-1.0.jar
instrumentation/grails-1.3-1.0.jar
instrumentation/grails-2-1.0.jar
instrumentation/grails-async-2.3-1.0.jar
instrumentation/hibernate-3.3-1.0.jar
instrumentation/hibernate-3.5-1.0.jar
instrumentation/hibernate-4.0-1.0.jar
instrumentation/hibernate-4.2-1.0.jar
instrumentation/hibernate-4.3-1.0.jar
instrumentation/httpclient-3.0-1.0.jar
instrumentation/httpclient-3.1-1.0.jar
instrumentation/httpclient-4.0-1.0.jar
instrumentation/httpurlconnection-1.0.jar
instrumentation/hystrix-1.0.2-1.0.jar
instrumentation/hystrix-1.2-1.0.jar
instrumentation/hystrix-1.3.0-1.0.jar
instrumentation/hystrix-1.3.15-1.0.jar
instrumentation/hystrix-1.4-1.0.jar
instrumentation/java-io-1.0.jar
instrumentation/java.completable-future-jdk8-1.0.jar
instrumentation/java.completable-future-jdk8u40-1.0.jar
instrumentation/javax.xml-1.0.jar
instrumentation/jax-rs-1.0-1.0.jar
instrumentation/jboss-7-1.0.jar
instrumentation/jcache-1.0.0-1.0.jar
instrumentation/jcache-datastore-1.0.0-1.0.jar
instrumentation/jdbc-db2-1.0.jar
instrumentation/jdbc-driver-1.0.jar
instrumentation/jdbc-embedded-derby-10.10.1.1-1.0.jar
instrumentation/jdbc-embedded-derby-10.11.1.1-1.0.jar
instrumentation/jdbc-embedded-derby-10.2.1.6-1.0.jar
instrumentation/jdbc-generic-1.0.jar
instrumentation/jdbc-h2-1.0.jar
instrumentation/jdbc-hsqldb-1.7.2.2-1.0.jar
instrumentation/jdbc-hsqldb-2.2.9-1.0.jar
instrumentation/jdbc-inet-merlia-1.0.jar
instrumentation/jdbc-inet-oranxo-1.0.jar
instrumentation/jdbc-jtds-1.0.jar
instrumentation/jdbc-mariadb-1.1.7-1.0.jar
instrumentation/jdbc-mariadb-1.3.0-1.0.jar
instrumentation/jdbc-mysql-3.0.8-1.0.jar
instrumentation/jdbc-mysql-6.0.2-1.0.jar
instrumentation/jdbc-mysql-connection-5.1.4-1.0.jar
instrumentation/jdbc-mysql-multihost-connections-5.1.3-1.0.jar
instrumentation/jdbc-mysql-multihost-connections-6.0.2-1.0.jar
instrumentation/jdbc-ojdbc-1.0.jar
instrumentation/jdbc-ojdbc-tns-1.0.jar
instrumentation/jdbc-ojdbc7-12.1.0.2-1.0.jar
instrumentation/jdbc-postgresql-8.0-312.jdbc3-1.0.jar
instrumentation/jdbc-postgresql-9.4.1207-1.0.jar
instrumentation/jdbc-postgresql-9.4.1208-1.0.jar
instrumentation/jdbc-resultset-1.0.jar
instrumentation/jdbc-socket-1.0.jar
instrumentation/jdbc-sqlserver-1.0.jar
instrumentation/jdbc-sybase-6-1.0.jar
instrumentation/jedis-1.4.0-1.0.jar
instrumentation/jedis-2.7.1-1.0.jar
instrumentation/jedis-2.7.2-1.0.jar
instrumentation/jersey-1-1.0.jar
instrumentation/jersey-2-1.0.jar
instrumentation/jets3t-0.8.0-1.0.jar
instrumentation/jets3t-0.9.0-1.0.jar
instrumentation/jetty-6-1.0.jar
instrumentation/jetty-7-1.0.jar
instrumentation/jetty-7.6-1.0.jar
instrumentation/jetty-9-1.0.jar
instrumentation/jetty-9.0.4-1.0.jar
instrumentation/jetty-9.1-1.0.jar
instrumentation/jetty-9.3-1.0.jar
instrumentation/jetty-servlet-9-1.0.jar
instrumentation/jms-1.1-1.0.jar
instrumentation/jsp-2.4-1.0.jar
instrumentation/mongodb-2.12-1.0.jar
instrumentation/mongodb-2.14-1.0.jar
instrumentation/mongodb-3.0-1.0.jar
instrumentation/mongodb-3.1-1.0.jar
instrumentation/mule-3.6-1.0.jar
instrumentation/mule-3.7-1.0.jar
instrumentation/mule-base-1.0.jar
instrumentation/mule-ei1-1.0.jar
instrumentation/mule-ei2-1.0.jar
instrumentation/netty-3.4-1.0.jar
instrumentation/netty-3.8-1.0.jar
instrumentation/netty-4.0.0-1.0.jar
instrumentation/netty-4.0.8-1.0.jar
instrumentation/ning-async-http-client-1.0-1.0.jar
instrumentation/ning-async-http-client-1.1-1.0.jar
instrumentation/ning-async-http-client-1.6.1-1.0.jar
instrumentation/okhttp-3.0-1.0.jar
instrumentation/okhttp-3.4-1.0.jar
instrumentation/okhttp-3.5-1.0.jar
instrumentation/okhttp-3.6-1.0.jar
instrumentation/openejb-3.0-1.0.jar
instrumentation/openjpa-1.0-1.0.jar
instrumentation/play-2.0-1.0.jar
instrumentation/play-2.1-1.0.jar
instrumentation/play-2.2-1.0.jar
instrumentation/play-2.3-1.0.jar
instrumentation/play-2.4-1.0.jar
instrumentation/play-2.5-1.0.jar
instrumentation/rabbit-amqp-2.7-1.0.jar
instrumentation/rabbit-amqp-3.5.0-1.0.jar
instrumentation/resin-3-1.0.jar
instrumentation/resin-4-1.0.jar
instrumentation/resteasy-2.2-1.0.jar
instrumentation/resteasy-3.0-1.0.jar
instrumentation/scala-2.9.3-1.0.jar
instrumentation/servlet-2.4-1.0.jar
instrumentation/servlet-user-1.0.jar
instrumentation/slick-3.0.0-1.0.jar
instrumentation/solr-1.4.0-1.0.jar
instrumentation/solr-3.1.0-1.0.jar
instrumentation/solr-3.5.0-1.0.jar
instrumentation/solr-3.6.0-1.0.jar
instrumentation/solr-4.0.0-1.0.jar
instrumentation/solr-5.0.0-1.0.jar
instrumentation/solr-5.1.0-1.0.jar
instrumentation/solr-5.4.0-1.0.jar
instrumentation/solr-6.4.0-1.0.jar
instrumentation/spray-can-1.3.1-1.0.jar
instrumentation/spray-can-client-1.3.1-1.0.jar
instrumentation/spray-client-1.3.1-1.0.jar
instrumentation/spray-http-1.3.1-1.0.jar
instrumentation/spring-3.0.0-1.0.jar
instrumentation/spring-4.0.0-1.0.jar
instrumentation/spring-4.2.0-1.0.jar
instrumentation/spring-aop-2-1.0.jar
instrumentation/spring-jms-2-1.0.jar
instrumentation/spring-ws-2.0-1.0.jar
instrumentation/spymemcached-2.12.0-1.0.jar
instrumentation/thrift-0.8-1.0.jar
instrumentation/tomcat-5.5-1.0.jar
instrumentation/tomcat-7-1.0.jar
instrumentation/tomcat-7.0.70-1.0.jar
instrumentation/tomcat-8.5.0-1.0.jar
instrumentation/tomcat-8.5.2-1.0.jar
instrumentation/tomcat-request-listener-1.0.jar
instrumentation/weblogic-10-1.0.jar
instrumentation/weblogic-12-1.0.jar
instrumentation/weblogic-12.2-1.0.jar
instrumentation/websphere-7-1.0.jar
instrumentation/websphere-8-1.0.jar
instrumentation/websphere-jmx-7-1.0.jar
instrumentation/websphere-liberty-profile-8.5.5.5-1.0.jar
instrumentation/websphere-liberty-profile-dispatcher-8.5.5.5-1.0.jar
instrumentation/websphere-liberty-profile-environment-8.5.5.5-1.0.jar
instrumentation/wildfly-8-1.0.jar
instrumentation/wildfly-8-CAT-1.0.jar
instrumentation/wildfly-8-PORT-1.0.jar

Issue Analytics

  • State:closed
  • Created 6 years ago
  • Comments:6 (3 by maintainers)

github_iconTop GitHub Comments

1reaction
jeremylongcommented, Jul 8, 2017

2.0.1 was released that includes this patch

1reaction
jeremylongcommented, Jul 3, 2017

done. This will be included in the next release.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Java agent identified with security vulnerabilities
While any software product has the potential to have security vulnerabilities, the New Relic Java agent may be erroneously identified by security products...
Read more >
NewRelic Complete Troubleshooting Guide
Troubleshooting Guide of NewRelic Java Agents. No ... Update Java config for legacy agent versions · Large number of false positive security ...
Read more >
Monitoring - RabbitMQ
With a large number of concurrent connections and queues, this can be very resource-intensive and too likely to produce false positives. The above...
Read more >
New Relic vs WhatsUp Gold Comparison - GetApp
Compare New Relic and WhatsUp Gold based on features, pricing, ... Occasional false positives, too many alerts, but thats likely how we have...
Read more >
How to monitor Spring Boot apps using New Relic Java agent
Configure the New Relic Java agent using environment variables. Check all monitoring data from the New Relic dashboard. The following video ...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found
Previous page

Error reading CPE data

Next page

NIST Feeds Moved?