Vulnerabilities (CVE)

Filtered by vendor Jetbrains Subscribe
Filtered by product Intellij Idea
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-29813 1 Jetbrains 1 Intellij Idea 2022-05-05 4.6 MEDIUM 6.7 MEDIUM
In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible
CVE-2022-29815 1 Jetbrains 1 Intellij Idea 2022-05-05 4.6 MEDIUM 6.7 MEDIUM
In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible
CVE-2022-29817 1 Jetbrains 1 Intellij Idea 2022-05-05 4.3 MEDIUM 6.1 MEDIUM
In JetBrains IntelliJ IDEA before 2022.1 reflected XSS via error messages in internal web server was possible
CVE-2019-14954 1 Jetbrains 1 Intellij Idea 2021-07-21 4.3 MEDIUM 5.9 MEDIUM
JetBrains IntelliJ IDEA before 2019.2 was resolving the markdown plantuml artifact download link via a cleartext http connection.
CVE-2021-25756 1 Jetbrains 1 Intellij Idea 2021-02-05 5.0 MEDIUM 5.3 MEDIUM
In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS.
CVE-2020-27622 1 Jetbrains 1 Intellij Idea 2020-11-23 5.0 MEDIUM 5.3 MEDIUM
In JetBrains IntelliJ IDEA before 2020.2, the built-in web server could expose information about the IDE version.
CVE-2019-18361 1 Jetbrains 1 Intellij Idea 2020-08-24 4.6 MEDIUM 5.3 MEDIUM
JetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution.