Filtered by vendor Gluu Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-9012 1 Gluu 1 Gluu Server 2024-08-04 6.1 Medium
A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity Configuration 4.0 allows remote attackers to inject arbitrary web script or HTML via the filename parameter.
CVE-2022-36663 1 Gluu 1 Oxauth 2024-08-03 9.8 Critical
Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.