HT
Product
Htmlunit
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 0Low 0
Watch
Add Htmlunit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-26119 | 9.8 | Apr 3 | Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage Affected: before 3.0.0 |
| CVE-2023-49093 | 8.8 | Dec 4 | HtmlUnit is a GUI-less browser for Java programs Affected: before 3.9.0 |
| CVE-2020-5529 | 8.1 | Feb 11 | HtmlUnit prior to 2.37.0 contains code execution vulnerabilities Affected: before 2.37.0 |
| CVE-2023-2798 | 7.5 | May 25 | Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS) Affected: before 2.70.0 |
| CVE-2022-29546 | 7.5 | Apr 25 | HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability Affected: before 2.61.0 |
| CVE-2022-28366 | 7.5 | Apr 21 | Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption Affected: before 2.27 |
Showing 6
