Export limit exceeded: 425803 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2019-12416

we got reports for 2 injection attacks against the DeltaSpike windowhandler.js. This is only active if a developer selected the ClientSideWindowStrategy which is not the default.

CVSS 3.1 · 6.1 Medium EPSS 2.7% KEV · Not listed
Vendors
Apache
Products
Deltaspike
CVE-2017-17837

DeltaSpike: XSS injection vulnerability in windowId handling

The Apache DeltaSpike-JSF 1.8.0 module has a XSS injection leak in the windowId handling. The default size of the windowId get's cut off after 10 characters (by default), so the impact might be limited. A fix got applied and released in Apache deltaspike-1.8.1.

CVSS 3.1 · 6.1 Medium EPSS 4.5% KEV · Not listed
Vendors
Apache
Products
Deltaspike