Filtered by vendor Gluu
Subscriptions
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2020-9012 | 1 Gluu | 1 Gluu Server | 2024-08-04 | 6.1 Medium |
A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity Configuration 4.0 allows remote attackers to inject arbitrary web script or HTML via the filename parameter. | ||||
CVE-2022-36663 | 1 Gluu | 1 Oxauth | 2024-08-03 | 9.8 Critical |
Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter. |
Page 1 of 1.