Skip to content
OpenAdvisories

Archive

17 July 2014

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium —

    Improper Neutralization of Input During Web Page Generation in Mojarra

    Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) <h:outputText> tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attack…