Directwebremoting
2 CVEs tracked since 2014. Since Nov 2014, none of them reached CISA KEV.
Directwebremoting CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2014-11 | 2 | 0 |
Products
The products that kept showing up in Directwebremoting's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 2 most recently published vulnerabilities affecting Directwebremoting.
- CVE-2014-5326Cross-site scripting (XSS) vulnerability in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.4.3
- CVE-2014-5325The (1) DOMConverter, (2) JDOMConverter, (3) DOM4JConverter, and (4) XOMConverter functions in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allow remote attackers to read arbitr...5.0
The record
- Peak rank
- #53 in Nov 2014
- Busiest month shown
- Nov 2014, 2 CVEs
- Months with a KEV entry
- 0 since Nov 2014
- Monthly snapshots
- 1 since 2014