Lucene search
China National Vulnerability DatabaseCNVD-2022-04997HistoryJan 10, 2022 - 12:00 a.m.
Apache Pluto Cross-Site Scripting Vulnerability (CNVD-2022-04997)
2022-01-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
0.002 Low
EPSS
Percentile
56.7%
A cross-site scripting vulnerability exists in the Apache Pluto Applicant MVCBean CDI portlet, which stems from the Apache Pluto Applicant MVCBean CDI runtime environment. portlet is vulnerable to cross-site scripting (XSS) attacks in the input fields of the JSP version of the portlet. No details of the vulnerability are currently available.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache pluto | lt | 3.1.1 |
Related
nvd
nvd
CVE-2021-36738
2022-01-06 09:15:07
osv
osv
Cross-site Scripting in Apache Pluto
2022-01-08 00:46:17
prion
prion
Cross site scripting
2022-01-06 09:15:00
cve
cve
CVE-2021-36738
2022-01-06 09:15:07
veracode
veracode
Cross-site Scripting (XSS)
2022-01-07 03:41:30
cvelist
cvelist
github
github
Cross-site Scripting in Apache Pluto
2022-01-08 00:46:17