Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage.
cve-program ·
Vendor product: net.sourceforge.htmlunit:htmlunit
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
cve-program ·
Vendor product: net.sourceforge.htmlunit:htmlunit
cve-program ·
Vendor product: Microsoft Office 2019 · Vendor product: Microsoft 365 Apps for Enterprise · Vendor product: Microsoft Office LTSC 2021
cve-program ·
Vendor product: netty
cve-program ·
Vendor product: Node.js
cve-program ·
Vendor product: Node.js
cve-program ·
Vendor product: Node.js
cve-program ·
Vendor product: Node.js
cve-program ·
Vendor product: PackageKit
cve-program ·
Vendor product: OpenSSL
cve-program ·
Vendor product: Spring Framework
cve-program ·
Vendor product: Spring Framework
cve-program ·
Vendor product: n/a
cve-program ·
Vendor product: Netty
cve-program ·
Vendor product: SUSE Enterprise Storage 5 · Vendor product: SUSE Linux Enterprise Server 12-SP2-BCL · Vendor product: SUSE Linux Enterprise Server 12-SP2-LTSS
cve-program ·
Vendor product: Spring Framework
cve-program ·
Vendor product: binutils
cve-program ·
Vendor product: Visual Studio Code
cve-program ·
Vendor product: kernel
cve-program ·
Vendor product: binutils
cve-program ·
Vendor product: binutils
cve-program ·
Vendor product: binutils
cve-program ·
Vendor product: Spring Framework
cve-program ·
Vendor product: binutils
cve-program ·
Vendor product: Intel(R) Processors
cve-program ·
Vendor product: Apache Tomcat
cve-program ·
Vendor product: Netty
cve-program ·
Vendor product: Intel(R) processors which
cve-program ·
Vendor product: Visual Studio Code
cve-program ·
Vendor product: Apache Tomcat
cve-program ·
Vendor product: Visual Studio Code
cve-program ·
Vendor product: Kernel
cve-program ·
Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows Server 2019
cve-program ·
Vendor product: Visual Studio Code
cve-program ·
Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows Server 2019
cve-program ·
Vendor product: HDA driver
cve-program ·
Vendor product: Lodash
cve-program ·
Vendor product: Spring Framework
cve-program ·
Vendor product: netty
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.