CVE-2010-3300CWE-649

It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks

published June 22, 2021

CVSS
—
EPSS
0%
Percentile
38.1
In the wild
Unconfirmed
What it is

It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00450 · 38.1th percentile
Weakness
CWE-649 · Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
Published
2021-06-22T11:56Z
EPSS history
Timeline
  • 22 JUN 11:56Z
    It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks
    cvelistv5