Количество 5
Количество 5
CVE-2025-68387
Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an unauthenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a vulnerability a function handler in the Vega AST evaluator.
CVE-2025-68387
Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an unauthenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a vulnerability a function handler in the Vega AST evaluator.
CVE-2025-68387
Improper neutralization of input during web page generation ('Cross-si ...
ROS-20260224-80-0035
Уязвимость kibana
GHSA-4rxh-p69j-7rxg
Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an unauthenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a vulnerability a function handler in the Vega AST evaluator.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-68387 Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an unauthenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a vulnerability a function handler in the Vega AST evaluator. | CVSS3: 6.1 | 0% Низкий | 8 месяцев назад |
 | CVE-2025-68387 Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an unauthenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a vulnerability a function handler in the Vega AST evaluator. | CVSS3: 6.1 | 0% Низкий | 8 месяцев назад |
| CVE-2025-68387 Improper neutralization of input during web page generation ('Cross-si ... | CVSS3: 6.1 | 0% Низкий | 8 месяцев назад |
 | ROS-20260224-80-0035 Уязвимость kibana | CVSS3: 6.1 | 0% Низкий | 6 месяцев назад |
| GHSA-4rxh-p69j-7rxg Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an unauthenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a vulnerability a function handler in the Vega AST evaluator. | CVSS3: 6.1 | 0% Низкий | 8 месяцев назад |
Уязвимостей на страницу