Apple Webobjects vulnerabilities

3 known vulnerabilities affecting apple/webobjects.

Total CVEs

3

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

MEDIUM3

Vulnerabilities

Page 1 of 1

CVE-2022-37724MEDIUMCVSS 6.1≥ 1.0, ≤ 5.4.32022-09-14

CVE-2022-37724 [MEDIUM] CWE-79 CVE-2022-37724: Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to Arbitrary HTTP Header injection and URL- or Header-based XSS reflection in all web-server adaptor interfaces.

CVE-2011-3998MEDIUMCVSS 4.3≤ 5.2v3.1+5 more2011-11-09

CVE-2011-3998 [MEDIUM] CWE-79 CVE-2011-3998: Cross-site scripting (XSS) vulnerability in Apple WebObjects 5.2 and earlier allows remote attackers Cross-site scripting (XSS) vulnerability in Apple WebObjects 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVE-2000-0299MEDIUMCVSS 5.0PoCv4.52000-04-04

CVE-2000-0299 [MEDIUM] CVE-2000-0299: Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept.