[SECURITY] [DLA 4246-1] libowasp-esapi-java security update

🗓️ 22 Jul 2025 01:10:08Reported by DebianType

Security update for libowasp-esapi-java addressing multiple vulnerabilities including CVE-2022-23457, CVE-2022-24891, CVE-2025-5878

Reporter	Title	Published	Views	Family All 92
ibm	Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Neutralization (CVE-2025-5878)	21 Nov 202511:50	–	ibm
ibm	Security Bulletin: IBM Cloud Pak for Network Automation 2.5.0 fixes multiple security vulnerabilities	20 Jun 202308:52	–	ibm
ibm	Security Bulletin: Weaker than expected SQL injection protection may affect IBM Business Automation Workflow traditional - CVE-2025-5878	30 Jan 202617:20	–	ibm
ibm	Security Bulletin: IBM OpenPages fixes multiple vulnerabilities	9 Jul 202506:23	–	ibm
ibm	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Commons Text 1.9	8 Dec 202204:10	–	ibm
ibm	Security Bulletin: Vulnerabilities Addressed in IBM Tivoli Network Manager IP Edition (ITNM) version 4.2 Fix Pack 23 (4.2.0.23)	2 Sep 202512:15	–	ibm
ibm	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
githubexploit	Exploit for Path Traversal in Owasp Enterprise_Security_Api	17 Feb 202616:23	–	githubexploit
githubexploit	Exploit for CVE-2025-5878	8 Jun 202605:26	–	githubexploit
bdu_fstec	The vulnerability of the `Validator.getValidDirectoryPath(String, String, File, boolean)` function in the web application security management library ESAPI (OWASP Enterprise Security API) allows a attacker to execute arbitrary code.	13 Jul 202200:00	–	bdu_fstec