Redwood Report2Web 4.3.4.5 & 4.5.3 - Cross-Site Scripting

Redwood Report2Web 4.3.4.5 and 4.5.3 contains a cross-site scripting vulnerability in the login panel which allows remote attackers to inject JavaScript via the signIn.do urll parameter. id: CVE-2021-26710 info: name: Redwood Report2Web 4.3.4.5 & 4.5.3 - Cross-Site Scripting author: pikpikcu...

CVE-2026-39371

References https://nvd.nist.gov/vuln/detail/CVE-2026-39371 https://github.com/redwoodjs/sdk/security/advisories/GHSA-x8rx-789c-2pxq...

EUVD-2026-46518

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Redwood UI. Supported versions that are affected are 24.4-26.3. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks...

CVE-2026-47032

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Redwood UI. Supported versions that are affected are 24.4-26.3. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks...

CVE-2026-47032: Improper Access Control

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Redwood UI. Supported versions that are affected are 24.4-26.3. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks...

PT-2026-62193

Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM component: Redwood UI. Supported versions that are affected are 24.4-26.3. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Siebel CRM End User. Successful attacks...

PT-2026-37173

Name of the Vulnerable Software and Affected Versions RedwoodSDK versions 1.0.0-beta.50 through 1.2.2 Description Server actions in rwsdk apply HTTP method enforcement but lack origin validation. This allows a request from a different origin, which the browser treats as same-site, to invoke a...

EUVD-2021-13500

Malware in sbrugna...

Malicious code in maple-redwood-580h (npm)

The package maple-redwood-580h was found to contain malicious code...

Malicious code in redwood-umbrella-d7j8 (npm)

The package redwood-umbrella-d7j8 was found to contain malicious code...

MAL-2025-21766 Malicious code in gorilla-redwood-tgom (npm)

The package gorilla-redwood-tgom was found to contain malicious code...

MAL-2025-38871 Malicious code in watermelon-redwood-nioz (npm)

The package watermelon-redwood-nioz was found to contain malicious code...

Malicious code in oak-redwood-8b5z (npm)

The package oak-redwood-8b5z was found to contain malicious code...

MAL-2025-31959 Malicious code in redwood-yearling-22ia (npm)

The package redwood-yearling-22ia was found to contain malicious code...

Malicious code in redwood-yew-d7xz (npm)

The package redwood-yew-d7xz was found to contain malicious code...

MAL-2025-27999 Malicious code in oak-redwood-8b5z (npm)

The package oak-redwood-8b5z was found to contain malicious code...

MAL-2025-26760 Malicious code in mountain-redwood-xo7z (npm)

The package mountain-redwood-xo7z was found to contain malicious code...

MAL-2025-31956 Malicious code in redwood-lima-5cvm (npm)

The package redwood-lima-5cvm was found to contain malicious code...

Malicious code in watermelon-redwood-nioz (npm)

The package watermelon-redwood-nioz was found to contain malicious code...

Malicious code in gorilla-redwood-tgom (npm)

The package gorilla-redwood-tgom was found to contain malicious code...