owasp-modsecurity

Records57All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high26CVSS 7.0–8.9

Exploited now

owasp-modsecurity records in CISA KEV

No owasp-modsecurity vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Modsecurity 15 records HIGH Owasp Modsecurity Core Rule Set 9 records MEDIUM Enterprise Security Api 4 records HIGH Json-sanitizer 3 records MEDIUM Defectdojo 2 records MEDIUM Dependency-check 2 records MEDIUM Dependency-track 2 records LOW Java Html Sanitizer 2 records HIGH

Records

2 records in Java Html Sanitizer · all components

TI-2025-40547 CVE-2025-66021 · GHSA-g9gq-3pfx-2gw2

OWASP Java HTML Sanitizer is vulnerable to XSS via noscript tag and improper style tag sanitization

HIGH 72

OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web applications while protecting against XSS.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00289 Published 2025-11-26 Partial fix · 20260101.1 CWE-79

TI-2021-18855 CVE-2021-42575 · GHSA-3w73-fmf3-hg5c

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies…

MEDIUM 47

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02975 Published 2021-10-18 Fixed in 20211018.1 CWE-20

Open these records in search →

Critical	10
High	26
Medium	18
Low	3
No CVSS	0