CVE-2014-5326 PUBLISHED CVSS 4.300000190734863 MEDIUM

Cross-site scripting (XSS) vulnerability in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

EPSS 0.22% · 44.2th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
0.22%
44.2th percentile

Affected Products

VendorProductVersions
n/an/an/a
Mavenorg.directwebremoting:dwr0, 3.0.M1
directwebremotingdirect_web_remoting0, 3.0, 3.0

Timeline

References

Open in Interactive Console →