Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-35043 3 Antisamy Project, Netapp, Oracle 11 Antisamy, Active Iq Unified Manager, Banking Enterprise Default Management and 8 more 2024-11-21 6.1 Medium
OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 as the replacement for the : character.
CVE-2020-6950 3 Eclipse, Oracle, Redhat 14 Mojarra, Banking Enterprise Default Management, Banking Platform and 11 more 2024-11-21 6.5 Medium
Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.