CWE-81 · 8 records

Improper Neutralization of Script in an Error Message Web Page

CVEs in this class

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
25Monitor	CVE-2025-24344No exploit	A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arbbosch rexroth ag · ctrlx os - solutions · CWE-81 pre-auth RCE	Medium6.3	—	0.4%	Apr 30, 2025
24Monitor	CVE-2022-4137Proof of concept	Keycloak: reflected xss attackredhat · keycloak · CWE-81 Pre-auth XSS	Medium6.1	—	1.2%	Sep 25, 2023
24Monitor	CVE-2024-6892Proof of concept	Journyx Reflected Cross Site Scriptingjournyx · journyx · CWE-81 pre-auth RCE	Medium6.1	—	0.8%	Aug 7, 2024
24Monitor	CVE-2022-4361Proof of concept	Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC provideredhat · keycloak · CWE-81 Pre-auth XSS	Medium6.1	—	0.7%	Jul 7, 2023
24Monitor	CVE-2019-25027No exploit	Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13vaadin · flow · CWE-81 Pre-auth XSS	Medium6.1	—	0.7%	Apr 23, 2021
24Monitor	CVE-2026-41568No exploit	Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapdocker · engine · CWE-81 Race condition	Medium6.1	—	0.1%	Jun 12, 2026
24Monitor	GHSA-jqj4-r483-4gvrNo exploit	Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13Maven · com.vaadin:vaadin-bom · CWE-81 Pre-auth XSS	Medium6.1	—	—	Apr 19, 2021
8Monitor	CVE-2025-0883No exploit	vulnerability has been discovered in OpenText™ Service Manager.opentext™ · service manager · CWE-81	Low2.1	—	0.3%	Mar 12, 2025

CVE-2025-24344
25Monitor
A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arb
MediumCVSS 6.3No exploitEPSS 0%
- pre-auth RCE
bosch rexroth ag · ctrlx os - solutionsApr 30, 2025
CVE-2022-4137
24Monitor
Keycloak: reflected xss attack
MediumCVSS 6.1Proof of conceptEPSS 1%
- Pre-auth
- XSS
redhat · keycloakSep 25, 2023
CVE-2024-6892
24Monitor
Journyx Reflected Cross Site Scripting
MediumCVSS 6.1Proof of conceptEPSS 1%
- pre-auth RCE
journyx · journyxAug 7, 2024
CVE-2022-4361
24Monitor
Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC provide
MediumCVSS 6.1Proof of conceptEPSS 1%
- Pre-auth
- XSS
redhat · keycloakJul 7, 2023
CVE-2019-25027
24Monitor
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
vaadin · flowApr 23, 2021
CVE-2026-41568
24Monitor
Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
MediumCVSS 6.1No exploitEPSS 0%
- Race condition
docker · engineJun 12, 2026
GHSA-jqj4-r483-4gvr
24Monitor
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
MediumCVSS 6.1No exploit
- Pre-auth
- XSS
Maven · com.vaadin:vaadin-bomApr 19, 2021
CVE-2025-0883
8Monitor
vulnerability has been discovered in OpenText™ Service Manager.
LowCVSS 2.1No exploitEPSS 0%
opentext™ · service managerMar 12, 2025

All vulnerability classes