Read the docs

playframework

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

playframework records in CISA KEV

No playframework vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Play Framework 2 records MEDIUM

Records

2 records in Play Framework · all components

TI-2014-02951 CVE-2014-3630 · GHSA-xpw4-hqm8-rj97

XML external entity (XXE) vulnerability in the Java XML processing functionality in Play…

Priority MEDIUM 47

XML external entity (XXE) vulnerability in the Java XML processing functionality in Play before 2.2.6 and 2.3.x before 2.3.5 might allow remote attackers to read arbitrary files, cause a denial of service, or have unspec…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02925 Published 2017-12-29 No fix listed CWE-611
TI-2015-01932 CVE-2015-2156 · GHSA-xfv3-rrfm-f2rv

Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and…

Priority MEDIUM 41

Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and ob…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05222 Published 2017-10-18 Partial fix · 4.0.28.Final, 3.9.8.Final +1 CWE-20
Open these records in search →