CWE-81
9 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 9Published CVEs9 of them scored
- 1Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-41568
Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
moby · moby
Medium6.1 - CVE-2025-24344
A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arbitrary HTML tags…
Bosch Rexroth AG · ctrlX OS - Solutions
Medium6.3 - CVE-2025-0883
vulnerability has been discovered in OpenText™ Service Manager.
OpenText™ · Service Manager
Low2.1 - CVE-2024-47882
OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project
OpenRefine · OpenRefine
Medium5.9 - CVE-2024-47064
Computer Vision Annotation Tool (CVAT) contains a reflected XSS via request endpoints
cvat-ai · cvat
Medium6.3 - CVE-2024-6892
Journyx Reflected Cross Site Scripting
Journyx · Journyx (jtime)
Medium6.1 - CVE-2022-4137
Keycloak: reflected xss attack
Red Hat · Red Hat Single Sign-On 7
High8.1 - CVE-2022-4361
Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The…
keycloak · keycloak
Critical10.0 - CVE-2019-25027
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
Vaadin · Vaadin
Medium6.1