exploitDog - Комплексное решение для обнаружения, оценки и устранения уязвимостей.

БДУ ФСТЭК

Microsoft MSRC

NVD

Oracle ELSA

Red Hat CVE

РЕД ОС

Rocky RLSA

SUSE CVRF

Ubuntu

Debian

Github

Количество 5

CVE-2014-1904

около 11 лет назад

Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the requested URI in a default action.

CVSS2: 4.3

EPSS: Низкий

CVE-2014-1904

больше 11 лет назад

Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the requested URI in a default action.

CVSS2: 4.3

EPSS: Низкий

CVE-2014-1904

около 11 лет назад

Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the requested URI in a default action.

CVSS2: 4.3

EPSS: Низкий

CVE-2014-1904

около 11 лет назад

Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/Form ...

CVSS2: 4.3

EPSS: Низкий

GHSA-ff7p-jqjm-v66h

около 3 лет назад

Improper Neutralization of Input During Web Page Generation in Spring Framework

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано
CVE-2014-1904 Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the requested URI in a default action.	CVSS2: 4.3	2% Низкий	около 11 лет назад
CVE-2014-1904 Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the requested URI in a default action.	CVSS2: 4.3	2% Низкий	больше 11 лет назад
CVE-2014-1904 Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the requested URI in a default action.	CVSS2: 4.3	2% Низкий	около 11 лет назад
CVE-2014-1904 Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/Form ...	CVSS2: 4.3	2% Низкий	около 11 лет назад
GHSA-ff7p-jqjm-v66h Improper Neutralization of Input During Web Page Generation in Spring Framework		2% Низкий	около 3 лет назад

Уязвимостей на страницу