Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

CWE-84 (Web页面编码URIScheme转义处理不恰当) — Vulnerability Class 10

10 vulnerabilities classified as CWE-84 (Web页面编码URIScheme转义处理不恰当). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPaused
CVE-2025-58444 MCP Inspector is Vulnerable to Potential Command Execution via XSS When Connecting to an Untrusted MCP Server — inspector 6.1AIMediumAI2025-09-08
CVE-2024-52890 IBM Engineering Lifecycle Optimization - Publishing cross-site scripting — IBM Engineering Lifecycle Optimization - Publishing 6.1 Medium2025-08-05
CVE-2025-30203 Tuleap allows XSS via the content of RSS feeds in the RSS widgets — tuleap 4.8 Medium2025-03-31
CVE-2024-42184 HCL BigFix Patch Download Plug-ins are affected by insecure support for file URI scheme — BigFix Patch Management Download Plug-ins 2.5 Low2025-01-23
CVE-2024-45045 JavaScript Injection via url encoded values in links in Collabora Office Android — online 6.3 Medium2024-08-29
CVE-2023-30959 Stored XSS via javascript URI in Apollo Change Requests comment — com.palantir.apollo:autopilot 4.1 Medium2023-09-26
CVE-2023-25571 Backstage has XSS Vulnerability in Software Catalog — backstage 6.8 Medium2023-02-14
CVE-2022-40181 多款Siemens产品跨站脚本漏洞 — Desigo PXM30-1 7.3 -2022-10-11
CVE-2021-3824 Openvpn OpenVPN 跨站脚本漏洞 — OpenVPN Access Server 6.1 -2021-09-23
CVE-2020-7011 Elastic App Search 跨站脚本漏洞 — Elastic App Search 6.1 -2020-06-03

Vulnerabilities classified as CWE-84 (Web页面编码URIScheme转义处理不恰当) represent 10 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.