CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-12416

we got reports for 2 injection attacks against the DeltaSpike windowhandler.js. This is only active if a developer selected the ClientSideWindowStrategy which is not the default.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.009

EPSS Ranking 74.1%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2019-12416

Apache » Deltaspike » Version: 1.4.0

cpe:2.3:a:apache:deltaspike:1.4.0
Apache » Deltaspike » Version: 1.4.1

cpe:2.3:a:apache:deltaspike:1.4.1
Apache » Deltaspike » Version: 1.4.2

cpe:2.3:a:apache:deltaspike:1.4.2
Apache » Deltaspike » Version: 1.5.0

cpe:2.3:a:apache:deltaspike:1.5.0
Apache » Deltaspike » Version: 1.5.1

cpe:2.3:a:apache:deltaspike:1.5.1
Apache » Deltaspike » Version: 1.5.2

cpe:2.3:a:apache:deltaspike:1.5.2
Apache » Deltaspike » Version: 1.5.3

cpe:2.3:a:apache:deltaspike:1.5.3
Apache » Deltaspike » Version: 1.5.4

cpe:2.3:a:apache:deltaspike:1.5.4
Apache » Deltaspike » Version: 1.6.0

cpe:2.3:a:apache:deltaspike:1.6.0
Apache » Deltaspike » Version: 1.6.1

cpe:2.3:a:apache:deltaspike:1.6.1
Apache » Deltaspike » Version: 1.7.0

cpe:2.3:a:apache:deltaspike:1.7.0
Apache » Deltaspike » Version: 1.7.1

cpe:2.3:a:apache:deltaspike:1.7.1
Apache » Deltaspike » Version: 1.7.2

cpe:2.3:a:apache:deltaspike:1.7.2
Apache » Deltaspike » Version: 1.8.0

cpe:2.3:a:apache:deltaspike:1.8.0
Apache » Deltaspike » Version: 1.8.1

cpe:2.3:a:apache:deltaspike:1.8.1
Apache » Deltaspike » Version: 1.8.2

cpe:2.3:a:apache:deltaspike:1.8.2
Apache » Deltaspike » Version: 1.9.0

cpe:2.3:a:apache:deltaspike:1.9.0
Apache » Deltaspike » Version: 1.9.2

cpe:2.3:a:apache:deltaspike:1.9.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-12416

Products

Pricing

Contact Us