Javascript

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Javascript records in CISA KEV

No Javascript vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xerver Http Server 1 record LOW

Records

1 record in Xerver Http Server · all components

TI-2009-03875 CVE-2009-4086 · GHSA-2wh9-mjfj-9cc7

CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers…

LOW 30

CRLF injection vulnerability in Xerver HTTP Server 4.31 and 4.32 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via certain byte sequences at the end of a URL.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04765 Published 2009-11-27 No fix listed CWE-20

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0