GCVE - cpe:2.3:a:caucho_technology:resin:2.1.12:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:caucho_technology:resin:2.1.12:*:*:*:*:*:*:*

part: a version: 2.1.12 update: *

Vendor	Caucho Technology (`231f374e-ebae-5c83-ad51-48ed7c6363eb`)
Product	Resin (`67d9dbd7-cd40-5295-a0d3-bff24f7c403c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2004-0280`	vulnerable	2026-06-08 04:47:49.297779	Details available Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" (encoded space character), e.g. index.jsp%20. Published: 2004-03-18T05:00:00.000Z Updated: 2024-08-08T00:10:03.990Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/15085 http://www.securityfocus.com/bid/9614 http://marc.info/?l=bugtraq&m=107635084830547&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1513`	vulnerable	2026-06-08 04:47:47.822079	Details available Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) env.jsp, (2) form.jsp, (3) session.jsp, (4) the move parameter to tictactoe.jsp, or the (5) name or (6) comment fields to guestbook.jsp. Published: 2007-10-25T19:00:00.000Z Updated: 2024-08-08T02:28:03.609Z Open on db.gcve.eu Reference links http://secunia.com/advisories/10031 https://exchange.xforce.ibmcloud.com/vulnerabilities/13460 http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012361.html http://www.securityfocus.com/bid/8852	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.