CVE-2010-3300: Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking

It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks...