CVE-2022-37724

The CVE-2022-37724 issue affects Project Wonder WebObjects, with vulnerable components in WebObjects adapters exposing Arbitrary HTTP Header injection and URL- or Header-based XSS reflection. Public records reference affected versions as 1.0 through 5.4.3 (and related advisories extend to 7.3 in ...

CVE-2011-3998

Apple WebObjects 5.2 and earlier are affected by a cross-site scripting (XSS) vulnerability. The issue permits remote attackers to cause arbitrary JavaScript/HTML execution in a user’s browser via unspecified vectors. Affected software is WebObjects, a web application server from Apple, with the ...

CVE-2000-0299

CVE-2000-0299 affects the WebObjects Developer 4.5 package, where the WebObjects.exe component is vulnerable to a buffer overflow triggered by HTTP requests with long headers (e.g., Accept). The description states this allows remote denial of service. No explicit patch or remediation is provided ...