Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: owasp-modsecurity Component: Enterprise Security Api Clear all filters
TI-2022-07517 CVE-2022-23457 · GHSA-8m5h-hrqm-pxm2

Path Traversal in ESAPI

Priority HIGH 76

ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02849 Published 2022-04-25 Fixed in 2.3.0.0 CWE-22
TI-2013-05080 CVE-2013-5960 · GHSA-2g56-7jv7-wxxq

The authenticated-encryption feature in the symmetric-encryption implementation in the…

Priority LOW 29

The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x before 2.1.0.1 does not properly resist tampering with serialized ciphertext, whic…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01655 Published 2013-09-30 Fixed in 2.1.0.1 CWE-310