Skip to content
Noroxi

HtmlUnit records

6 published records for vendor htmlunit.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 22
  3. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2023-26119
    40Plan

    Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, wh

    CriticalCVSS 9.8No exploitEPSS 3%

    htmlunit · htmlunitApr 3, 2023

  • CVE-2023-49093
    36Monitor

    HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL

    HighCVSS 8.8No exploitEPSS 2%

    htmlunit · htmlunitDec 4, 2023

  • CVE-2020-5529
    33Monitor

    HtmlUnit prior to 2.37.0 contains code execution vulnerabilities.

    HighCVSS 8.1No exploitEPSS 5%

    htmlunit · htmlunitFeb 11, 2020

  • CVE-2022-28366
    31Monitor

    Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory

    HighCVSS 7.5No exploitEPSS 2%

    cyberneko html project · cyberneko htmlApr 21, 2022

  • CVE-2022-29546
    30Monitor

    HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability.

    HighCVSS 7.5No exploitEPSS 1%

    htmlunit · htmlunitApr 24, 2022

  • CVE-2023-2798
    30Monitor

    Denial of service in HtmlUnit

    HighCVSS 7.5No exploitEPSS 1%

    htmlunit · htmlunitMay 25, 2023