Lucene search

Improper Neutralization of Input During Web Page Generation in Direct Web Remoting

🗓️ 17 May 2022 04:06:21Reported by GitHub Advisory DatabaseType

Improper Input Neutralization in Direct Web Remoting for Cross-Site Scriptin

Reporter	Title	Published	Views	Family All 8
CVE	CVE-2014-5326	24 Nov 201402:59	–	cve
Prion	Cross site scripting	24 Nov 201402:59	–	prion
Cvelist	CVE-2014-5326	24 Nov 201402:00	–	cvelist
Japan Vulnerability Notes	JVN#52422792: Direct Web Remoting (DWR) vulnerable to cross-site scripting	14 Nov 201400:00	–	jvn
OSV	Improper Neutralization of Input During Web Page Generation in Direct Web Remoting	17 May 202204:21	–	osv
NVD	CVE-2014-5326	24 Nov 201402:59	–	nvd
IBM Security Bulletins	Security Bulletin: Rational Change is affected by vulnerabilities (CVE-2014-5325 and CVE-2014-5326) in Java Open Source Direct Web Remoting library.	17 Jun 201805:00	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Synergy is affected by vulnerabilities (CVE-2014-5325 and CVE-2014-5326) in Java Open Source Direct Web Remoting library.	22 Dec 202016:37	–	ibm

Vulners

Node

org.directwebremoting dwrRange3.0.M1–3.0.RC2

org.directwebremoting dwrRange<2.0.11

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-5326
jvn	www.jvn.jp/en/jp/JVN52422792/index.html
jvndb	www.jvndb.jvn.jp/jvndb/JVNDB-2014-000118
github	www.github.com/advisories/GHSA-q5v2-2v66-6hwm

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 May 2022 04:21Current

5.6Medium risk

Vulners AI Score5.6

CVSS24.3

EPSS0.001

CWE-79