Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2016-5682

hawtio-swagger-ui: XSS vulnerability in Definitions section

Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section.

CVSS 3.1 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Smartbear
Products
Swagger-ui
CVE-2021-46708

The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.

CVSS 3.1 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Smartbear
Products
Swagger-ui-dist