Directwebremoting - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2014-11-24.

Products

• Direct Web Remoting - 2 CVEs

Newest CVEs of Directwebremoting

• CVE-2014-5326 - CVSS 4.3 (medium), 2014-11-24: Cross-site scripting (XSS) vulnerability in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allows remote attackers to inject arbitrary web…
• CVE-2014-5325 - CVSS 5 (medium), 2014-11-24: The (1) DOMConverter, (2) JDOMConverter, (3) DOM4JConverter, and (4) XOMConverter functions in Direct Web Remoting (DWR) through 2.0.10 and 3.x through…