Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:20703
HistoryJul 08, 2019 - 11:48 a.m.

Cross-Site Scripting (XSS)

2019-07-0811:48:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.005 Low

EPSS

Percentile

77.6%

uima-ducc-web is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject arbitrary Javascript into a victim’s browser via multiple parameters due to the lack of output encoding.

CPENameOperatorVersion
uima-ducc-weble2.2.2
uima-ducc-weble2.2.2

0.005 Low

EPSS

Percentile

77.6%