The vulnerability of the Java library for analyzing, extracting, and managing data in HTML documents, jsoup, arises from the lack of protection for website structure. This allows attackers to execute cross-site scripting (XSS) attacks.

🗓️ 05 Mar 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 11 Views

Jsoup lacks protection for website structure, enabling cross site scripting attacks.

Reporter	Title	Published	Views	Family All 30
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found with third-party libraries used by IBM® MobileFirst Platform	17 Feb 202315:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance is vulnerable to denial of service and cross-site scripting due to use of jsoup (CVE-2021-37714, CVE-2015-6748)	4 Jan 202316:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerability (CVE-2015-6748)	19 Jul 201916:25	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in JSoup affects IBM Forms Experience Builder (CVE-2015-6748)	16 Jun 201819:52	–	ibm
CNVD	JSoup Cross-Site Scripting Vulnerability	27 Sep 201500:00	–	cnvd
CVE	CVE-2015-6748	25 Sep 201717:00	–	cve
Cvelist	CVE-2015-6748	25 Sep 201717:00	–	cvelist
Debian	[SECURITY] [DLA 2075-1] jsoup security update	26 Jan 202021:36	–	debian
Debian CVE	CVE-2015-6748	25 Sep 201717:00	–	debiancve
Tenable Nessus	Debian DLA-2075-1 : jsoup security update	27 Jan 202000:00	–	nessus

Vulners

Node

OR

red_hat red_hat_jboss_fuseMatch6

red_hat red_hat_jboss_enterprise_application_platformMatch6

elastic_nv logstashMatch8.12.1

red_hat jboss_bpm_suiteMatch6.2

google android_studioMatch2025.2.3.9

Source	Link
github	www.github.com/jhy/jsoup/pull/582
security-tracker	www.security-tracker.debian.org/tracker/CVE-2015-6748
access	www.access.redhat.com/security/cve/CVE-2015-6748
web	www.web.nvd.nist.gov/view/vuln/detail

10 Feb 2026 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 36.1

CVSS 26.4

EPSS0.02177

jsoup cross site scripting website structure protection deficiency web page security