CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-29577

OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content. NOTE: this issue exists because of an incomplete fix for CVE-2022-28367.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 39.8%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2022-29577

Antisamy Project » Antisamy » Version: N/A

cpe:2.3:a:antisamy_project:antisamy:-
Antisamy Project » Antisamy » Version: 1.4.1

cpe:2.3:a:antisamy_project:antisamy:1.4.1
Antisamy Project » Antisamy » Version: 1.4.2

cpe:2.3:a:antisamy_project:antisamy:1.4.2
Antisamy Project » Antisamy » Version: 1.4.3

cpe:2.3:a:antisamy_project:antisamy:1.4.3
Antisamy Project » Antisamy » Version: 1.4.4

cpe:2.3:a:antisamy_project:antisamy:1.4.4
Antisamy Project » Antisamy » Version: 1.4.5

cpe:2.3:a:antisamy_project:antisamy:1.4.5
Antisamy Project » Antisamy » Version: 1.5

cpe:2.3:a:antisamy_project:antisamy:1.5
Antisamy Project » Antisamy » Version: 1.5.1

cpe:2.3:a:antisamy_project:antisamy:1.5.1
Antisamy Project » Antisamy » Version: 1.5.10

cpe:2.3:a:antisamy_project:antisamy:1.5.10
Antisamy Project » Antisamy » Version: 1.5.11

cpe:2.3:a:antisamy_project:antisamy:1.5.11
Antisamy Project » Antisamy » Version: 1.5.12

cpe:2.3:a:antisamy_project:antisamy:1.5.12
Antisamy Project » Antisamy » Version: 1.5.13

cpe:2.3:a:antisamy_project:antisamy:1.5.13
Antisamy Project » Antisamy » Version: 1.5.2

cpe:2.3:a:antisamy_project:antisamy:1.5.2
Antisamy Project » Antisamy » Version: 1.5.3

cpe:2.3:a:antisamy_project:antisamy:1.5.3
Antisamy Project » Antisamy » Version: 1.5.5

cpe:2.3:a:antisamy_project:antisamy:1.5.5
Antisamy Project » Antisamy » Version: 1.5.6

cpe:2.3:a:antisamy_project:antisamy:1.5.6
Antisamy Project » Antisamy » Version: 1.5.7

cpe:2.3:a:antisamy_project:antisamy:1.5.7
Antisamy Project » Antisamy » Version: 1.5.8

cpe:2.3:a:antisamy_project:antisamy:1.5.8
Antisamy Project » Antisamy » Version: 1.5.9

cpe:2.3:a:antisamy_project:antisamy:1.5.9
Antisamy Project » Antisamy » Version: 1.6.0

cpe:2.3:a:antisamy_project:antisamy:1.6.0
Antisamy Project » Antisamy » Version: 1.6.1

cpe:2.3:a:antisamy_project:antisamy:1.6.1
Antisamy Project » Antisamy » Version: 1.6.2

cpe:2.3:a:antisamy_project:antisamy:1.6.2
Antisamy Project » Antisamy » Version: 1.6.3

cpe:2.3:a:antisamy_project:antisamy:1.6.3
Antisamy Project » Antisamy » Version: 1.6.4

cpe:2.3:a:antisamy_project:antisamy:1.6.4
Antisamy Project » Antisamy » Version: 1.6.5

cpe:2.3:a:antisamy_project:antisamy:1.6.5
Antisamy Project » Antisamy » Version: 1.6.6

cpe:2.3:a:antisamy_project:antisamy:1.6.6
Antisamy Project » Antisamy » Version: 1.6.6.1

cpe:2.3:a:antisamy_project:antisamy:1.6.6.1
Oracle » Enterprise Manager Base Platform » Version: 13.4.0.0

cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0
Oracle » Enterprise Manager Base Platform » Version: 13.5.0.0

cpe:2.3:a:oracle:enterprise_manager_base_platform:13.5.0.0
Oracle » Weblogic Server » Version: 12.2.1.3.0

cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0
Oracle » Weblogic Server » Version: 12.2.1.4.0

cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0
Oracle » Weblogic Server » Version: 14.1.1.0.0

cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-29577

Products

Pricing

Contact Us