MEDIUM🇵🇱 Wersja polska

CVE-2010-3300

CVSS 5.9v3.1pub. 2021-06-22upd. 2024-11-21

It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Owasp Enterprise Security Api For Java

    APP
    Owasp
    2.0< 2.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2026-21876CRITICAL9.3PL ✓ten sam vendor

OWASP CRS: pominięcie wykrywania złośliwego charset w żądaniach multipart

CVE-2025-66022CRITICAL9.6PL ✓ten sam vendor

OWASP Faction: RCE przez brak uwierzytelnienia w endpoint zarządzania rozszerzeniami

CVE-2023-38199CRITICAL9.8ten sam vendor

coreruleset (aka OWASP ModSecurity Core Rule Set) through 3.3.4 does not detect multiple Content-Type request ...

CVE-2020-22669CRITICAL9.8ten sam vendor

Modsecurity owasp-modsecurity-crs 3.2.0 (Paranoia level at PL1) has a SQL injection bypass vulnerability. Atta...

CVE-2021-35368CRITICAL9.8ten sam vendor

OWASP ModSecurity Core Rule Set 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 is affected by ...