Known vulnerabilities in Enterprise Security API
Vendor:
OWASP
Software:
Enterprise Security API
Software CPE:
cpe:2.3:a:owasp:esapi:*:*:*:*:*:*:*:*
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU63480 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-24891 |
CWE-79 | Low | 2.3.0.0 | 20.05.2022 |
SB2022052008 SB2022052009 SB2022052010 and 5 more |
||
| #VU63479 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-23457 |
CWE-22 | High | 2.3.0.0 | 20.05.2022 |
SB2022052008 SB2022052009 SB2022052010 and 11 more |