Host On Demand

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-5002 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in IBM Host On-Demand 11.0 through 11.0.14 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

IBM XSS Host On Demand

NVD

CVSS 3.0

6.1

EPSS

0.2%

CVE-2013-4002 Maven HIGH PATCH This Week

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable.

Java Denial Of Service Apache Oracle IBM +14

NVD

CVSS 2.0

7.1

EPSS

5.6%

CVE-2015-5002

EPSS 0% CVSS 6.1

MEDIUM This Month

IBM XSS Host On Demand

NVD

CVE-2013-4002 Maven

EPSS 6% CVSS 7.1

HIGH PATCH This Week

Java Denial Of Service Apache +16

NVD