Lucene search

Gluu Security Vulnerabilities

cve

CVE-2020-9012

A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity Configuration 4.0 allows remote attackers to inject arbitrary web script or HTML via the filename parameter.

6.1CVSS

5.9AI Score

0.002EPSS

2020-02-16 08:15 PM

cve

CVE-2022-36663

Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.

9.8CVSS

9.2AI Score

0.002EPSS

2022-09-06 09:15 PM