Количество 3
Количество 3
CVE-2010-4007
Oracle Mojarra uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057.
CVE-2010-4007
Oracle Mojarra uses an encrypted View State without a Message Authenti ...
GHSA-v49c-75x7-q86w
Oracle Mojarra uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2010-4007 Oracle Mojarra uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057. | CVSS2: 5 | 0% Низкий | больше 15 лет назад | |
CVE-2010-4007 Oracle Mojarra uses an encrypted View State without a Message Authenti ... | CVSS2: 5 | 0% Низкий | больше 15 лет назад | |
GHSA-v49c-75x7-q86w Oracle Mojarra uses an encrypted View State without a Message Authentication Code (MAC), which makes it easier for remote attackers to perform successful modifications of the View State via a padding oracle attack, a related issue to CVE-2010-2057. | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу