Lucene search
K

6 matches found

CNVD
CNVD
added 2022/01/10 12:0 a.m.22 views

Apache Pluto Cross-Site Scripting Vulnerability (CNVD-2022-04997)

A cross-site scripting vulnerability exists in the Apache Pluto Applicant MVCBean CDI portlet, which stems from the Apache Pluto Applicant MVCBean CDI runtime environment. portlet is vulnerable to cross-site scripting XSS attacks in the input fields of the JSP version of the portlet. No details o...

6.1CVSS2.3AI score0.0601EPSS
Exploits0References1
OSV
OSV
added 2022/01/08 12:46 a.m.14 views

GHSA-JG6J-JRXV-2HH9 Cross-site Scripting in Apache Pluto

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact...

6.1CVSS5.9AI score0.0601EPSS
Exploits0References3
OSV
OSV
added 2022/01/06 9:15 a.m.1 views

CVE-2021-36738

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact...

6.1CVSS6.4AI score0.0601EPSS
Exploits0References1
NVD
NVD
added 2022/01/06 9:15 a.m.8 views

CVE-2021-36738

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact...

6.1CVSS0.0601EPSS
Exploits0References1
Prion
Prion
added 2022/01/06 9:15 a.m.17 views

Cross site scripting

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact...

4.3CVSS5.9AI score0.0601EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/01/06 8:50 a.m.11 views

CVE-2021-36738 XSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact...

6.1AI score0.0601EPSS
Exploits0References1
Rows per page
Query Builder