Lucene search
+L

6 matches found

osv_ghsa
osv_ghsa
•added 2022/01/08 12:46 a.m.•87 views

GHSA-JG6J-JRXV-2HH9 Cross-site Scripting in Apache Pluto

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact...

6.1CVSS5.9AI score0.02327EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/01/06 9:15 a.m.•25 views

CVE-2021-36738

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact...

6.1CVSS6.4AI score0.02327EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/01/06 8:50 a.m.•48 views

CVE-2021-36738 XSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact...

6.1AI score0.02327EPSS
SaveExploits0References1
Mend
Mend
•added 2022/01/06 8:50 a.m.•4 views

CVE-2021-36738

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact...

6.1CVSS0.02327EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/01/06 12:00 a.m.•3 views

PT-2022-10541

Name of the Vulnerable Software and Affected Versions Apache Pluto Applicant MVCBean CDI portlet versions prior to 3.1.1 Description The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting XSS attacks. Recommendations For versio...

6.1CVSS0.02327EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/06 12:00 a.m.•5 views

CVE-2021-36738: Improper Neutralization of Input During Web Page Generation

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact...

6.1CVSS5.8AI score0.02327EPSS
SaveExploits0References3
Rows per page
Query Builder