Jflow
1 CVEs
product
Monthly
Injection vulnerability in JFlow's WF_CCForm Calculate function allows authenticated remote attackers to perform injection attacks with limited impact on confidentiality, integrity, and availability. Public exploit code exists for this vulnerability, though no patch is currently available from the project maintainers.
Java
Jflow
NVD
VulDB
CVSS 3.1
6.3
EPSS
0.0%
CVE-2026-3813
EPSS 0%
CVSS 6.3
MEDIUM
POC
This Month
Injection vulnerability in JFlow's WF_CCForm Calculate function allows authenticated remote attackers to perform injection attacks with limited impact on confidentiality, integrity, and availability. Public exploit code exists for this vulnerability, though no patch is currently available from the project maintainers.
Java
Jflow
NVD
VulDB