USN-8181-1 libowasp-esapi-java vulnerabilities

🗓️ 16 Apr 2026 17:56:26Reported by GoogleType

osv

osv🔗 osv.dev

ESAPI Java: path bypass, XSS via javascript URLs, and SQL injection bypass.

Reporter	Title	Published	Views	Family All 89
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Neutralization (CVE-2025-5878)	21 Nov 202511:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.5.0 fixes multiple security vulnerabilities	20 Jun 202308:52	–	ibm
IBM Security Bulletins	Security Bulletin: Weaker than expected SQL injection protection may affect IBM Business Automation Workflow traditional - CVE-2025-5878	30 Jan 202617:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM OpenPages fixes multiple vulnerabilities	9 Jul 202506:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Commons Text 1.9	8 Dec 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities Addressed in IBM Tivoli Network Manager IP Edition (ITNM) version 4.2 Fix Pack 23 (4.2.0.23)	2 Sep 202512:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	19 Jan 202313:54	–	ibm
GithubExploit	Exploit for Path Traversal in Owasp Enterprise_Security_Api	17 Feb 202616:23	–	githubexploit
Circl	CVE-2022-23457	26 Apr 202200:36	–	circl
Circl	CVE-2022-24891	28 Apr 202200:13	–	circl

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-8181-1
ubuntu	www.ubuntu.com/security/CVE-2022-23457
ubuntu	www.ubuntu.com/security/CVE-2022-24891
ubuntu	www.ubuntu.com/security/CVE-2025-5878

20 May 2026 16:04Current

5.8Medium risk

Vulners AI Score5.8

CVSS 27.5

CVSS 3.17.5 - 9.8

CVSS 46.9

CVSS 37.3

EPSS0.01032

SSVC

path validation bypass cross site scripting javascript URLs sql injection defense ubuntu lts