GCVE - cpe:2.3:a:google:web_toolkit:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:google:web_toolkit:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Google (`f181d1eb-7269-5bae-b76e-e66ceb214562`)
Product	Web Toolkit (`9587a923-bb40-5383-a1e2-7507d7f6806d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/gwtproject/gwt`	purl2cpe	2026-06-01 10:16:38.818490
`pkg:maven/com.google.gwt/gwt`	purl2cpe	2026-06-01 10:16:38.818493

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4204`	vulnerable	2026-06-08 05:04:34.552085	Details available Multiple cross-site scripting (XSS) vulnerabilities in the JUnit files in the GWTTestCase in Google Web Toolkit (GWT) before 2.5.1 RC1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2013-11-15T18:16:00.000Z Updated: 2024-08-06T16:38:01.911Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2013/08/05/1 http://www.securityfocus.com/bid/61590 http://www.openwall.com/lists/oss-security/2013/08/05/3 http://www.gwtproject.org/release-notes.html#Release_Notes_2_5_1_RC1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6452`	vulnerable	2026-06-08 04:50:08.854256	Details available Unspecified vulnerability in the benchmark reporting system in Google Web Toolkit (GWT) before 1.4.61 has unknown impact and attack vectors, possibly related to cross-site scripting (XSS). Published: 2007-12-20T00:00:00.000Z Updated: 2024-08-07T16:11:05.358Z Open on db.gcve.eu Reference links http://code.google.com/webtoolkit/releases/release-notes-1.4.61.html http://secunia.com/advisories/28122 http://www.securityfocus.com/bid/26915 https://exchange.xforce.ibmcloud.com/vulnerabilities/39117 http://www.vupen.com/english/advisories/2007/4248	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2378`	vulnerable	2026-06-08 04:49:44.756163	Details available The Google Web Toolkit (GWT) framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers to obtain the data via a web page that retrieves the data through a URL in the SRC attribute of a SCRIPT element and captures the data using other JavaScript code, aka "JavaScript Hijacking." Published: 2007-04-30T23:00:00.000Z Updated: 2024-08-07T13:33:28.628Z Open on db.gcve.eu Reference links http://www.fortifysoftware.com/servlet/downloads/public/JavaScript_Hijacking.pdf http://osvdb.org/43321	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.