Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Opensymphony Component: Webwork Clear all filters
TI-2011-01813 CVE-2011-2088 · GHSA-9ccm-g362-2r35

XWork 2.2.1 in Apache Struts 2.2.1, and OpenSymphony XWork in OpenSymphony WebWork…

Priority LOW 32

XWork 2.2.1 in Apache Struts 2.2.1, and OpenSymphony XWork in OpenSymphony WebWork, allows remote attackers to obtain potentially sensitive information about internal Java class paths via vectors involving an s:submit el…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0614 Published 2011-05-13 Partial fix · 2.2.2 CWE-200
TI-2011-01551 CVE-2011-1772 · GHSA-56f8-g68r-j699

Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before…

Priority LOW 38

Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors in…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.33346 Published 2011-05-13 Partial fix · 2.2.3 CWE-79