2 matches found
GHSA-2C6Q-RGVJ-66RX Apache Tiles Vulnerable to XSS via EL Expression Injection
Apache Tiles 2.1 before 2.1.2, as used in Apache Struts and other products, evaluates Expression Language EL expressions twice in certain circumstances, which allows remote attackers to conduct cross-site scripting XSS attacks or obtain sensitive information via unspecified vectors, related to th...
Security Bulletin: Potential Denial of Service in IBM WebSphere Application Server CVE-2014-0050
Summary Apache Commons FileUpload used by IBM WebSphere Application Server may be vulnerable to a denial of service. Vulnerability Details CVEID: CVE-2014-0050 Description: Potential denial of service in Apache Commons FileUpload CVSS Base Score: 5 CVSS Temporal Score: See...