owasp enterprise security api for java vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.

Owasp Enterprise Security Api For Java Owasp Enterprise Security Api For Java 2.0

2.6

CVSSv2

The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x prior to 2.1.0 does not properly resist tampering with serialized ciphertext, which makes it easier for remote malicious users to bypass inten...

Owasp Enterprise Security Api 2.0.1 Owasp Enterprise Security Api 2.0

5.8

CVSSv2

The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x prior to 2.1.0.1 does not properly resist tampering with serialized ciphertext, which makes it easier for remote malicious users to bypass int...

Owasp Enterprise Security Api

4.3

CVSSv2

ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, there is a potential for a cross-site scripting vulnerability in ESAPI caused by a incorrect regular expression for "onsiteURL" in the *...

Owasp Enterprise Security Api Oracle Weblogic Server 12.2.1.3.0 Oracle Weblogic Server 12.2.1.4.0 Oracle Weblogic Server 14.1.1.0.0 Netapp Oncommand Workflow Automation -Netapp Active Iq Unified Manager -

1 Github repository

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook