CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2022/05/17 3:42 a.m.•33 views

GHSA-2J4Q-9FFF-236J Apache Struts XSS Vulnerability

Apache Struts 2.x before 2.3.28 does not sanitize text in the Locale object constructed by I18NInterceptor, which might allow remote attackers to conduct cross-site scripting XSS attacks via unspecified vectors involving language display...

6.1CVSS5.9AI score0.0778EPSS

SaveExploits0References7

OSV•added 2016/04/12 4:59 p.m.•12 views

CVE-2016-2162

Apache Struts 2.x before 2.3.25 does not sanitize text in the Locale object constructed by I18NInterceptor, which might allow remote attackers to conduct cross-site scripting XSS attacks via unspecified vectors involving language display...

6.1CVSS5.9AI score

SaveExploits0References3

Prion•added 2016/04/12 4:59 p.m.•29 views

Cross site scripting

4.3CVSS6AI score0.0778EPSS

SaveExploits0References3Affected Software1

Rapid7 Vulnerability Database (full)•added 2016/04/12 12:00 a.m.•3 views

CVE-2016-2162: Improper Neutralization of Input During Web Page Generation

6.1CVSS6.8AI score0.0778EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by