Read the docs

owasp-modsecurity

Records57All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high26CVSS 7.0–8.9

Exploited now

owasp-modsecurity records in CISA KEV

No owasp-modsecurity vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Modsecurity 15 records HIGH Owasp Modsecurity Core Rule Set 9 records MEDIUM Enterprise Security Api 4 records HIGH Json-sanitizer 3 records MEDIUM Defectdojo 2 records MEDIUM Dependency-check 2 records MEDIUM Dependency-track 2 records LOW Java Html Sanitizer 2 records HIGH

Records

4 records in Enterprise Security Api · all components

TI-2022-07517 CVE-2022-23457 · GHSA-8m5h-hrqm-pxm2

Path Traversal in ESAPI

Priority HIGH 76

ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02849 Published 2022-04-25 Fixed in 2.3.0.0 CWE-22
TI-2013-05080 CVE-2013-5960 · GHSA-2g56-7jv7-wxxq

The authenticated-encryption feature in the symmetric-encryption implementation in the…

Priority LOW 29

The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x before 2.1.0.1 does not properly resist tampering with serialized ciphertext, whic…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01655 Published 2013-09-30 Fixed in 2.1.0.1 CWE-310
Open these records in search →