Undertow input validation error vulnerability

Undertow is a web server provided by the Undertow company in the United States. Undertow has a vulnerability related to input validation errors, which stem from Servlets that call the method HttpServletRequestImpl.getParameterNames. This vulnerability could lead to a remote denial-of-service atta...

CVE-2013-1646

Multiple cross-site scripting XSS vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allow remote attackers to inject arbitrary web script or HTML via 1 invalid JSON data in a mail-sending POST request, 2 an arbitrary parameter to...

CVE-2019-17573

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting XSS attack, which allows a malicious actor to inject javascript into the web page. Please note that the attack exploit...