Owasp Enterprise Security Api — known CVE vulnerabilities

Every CVE whose affected-product data names Owasp Enterprise Security Api, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-23457 — CVSS 7.5 (high): ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, the…
• CVE-2013-5960 — CVSS 5.8 (medium): The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x…
• CVE-2022-24891 — CVSS 5.4 (medium): ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, there…
• CVE-2013-5679 — CVSS 2.6 (low): The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x…