| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2021-31403 | Timing side channel vulnerability in UIDL request handler in Vaadin 7 and 8 | Vaadin | Vaadin | Medium | 4.0 | 2021-04-23 16:05:41 | Deep Dive |
| CVE-2020-36321 | Directory traversal in development mode handler in Vaadin 14 and 15-17 | Vaadin | Vaadin | Medium | 5.9 | 2021-04-23 16:05:41 | Deep Dive |
| CVE-2020-36320 | Regular expression Denial of Service (ReDoS) in EmailValidator class in Vaadin 7 | Vaadin | Vaadin | High | 7.5 | 2021-04-23 16:05:41 | Deep Dive |
| CVE-2020-36319 | Potential sensitive data exposure in applications using Vaadin 15 | Vaadin | Vaadin | Low | 3.1 | 2021-04-23 16:05:41 | Deep Dive |
| CVE-2019-25028 | Stored cross-site scripting in Grid component in Vaadin 7 and 8 | Vaadin | Vaadin | Medium | 5.4 | 2021-04-23 16:05:41 | Deep Dive |
| CVE-2018-25007 | Unauthorized client-side property update in UIDL request handler in Vaadin 10 and 11 | Vaadin | Vaadin | Low | 2.6 | 2021-04-23 16:05:40 | Deep Dive |
| CVE-2019-25027 | Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13 | Vaadin | Vaadin | Medium | 6.1 | 2021-04-23 16:05:40 | Deep Dive |