Read the docs

Vaadin

Records35All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9

Exploited now

Vaadin records in CISA KEV

No Vaadin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Vaadin 24 records MEDIUM Flow 11 records MEDIUM Designer 1 record MEDIUM Flow-server 1 record LOW Vaadin-checkbox-flow 1 record LOW Vaadin-menu-bar 1 record LOW

Records

1 record in Vaadin-menu-bar · all components

TI-2021-12990 CVE-2021-33611 · GHSA-93c4-vf86-3rj7

Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14

Priority LOW 29

Missing output sanitization in test sources in org.webjars.bowergithub.vaadin:vaadin-menu-bar versions 1.0.0 through 1.2.0 (Vaadin 14.0.0 through 14.4.4) allows remote attackers to execute malicious JavaScript in browser…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00986 Published 2021-11-02 Fixed in 14.4.5, 1.2.1 CWE-79
Open these records in search →