Caucho Technology Resin Professional (Pro) 4.0.40

CPE Details

Caucho Technology Resin Professional (Pro) 4.0.40
caucho
resin
4.0.40
2014-07-28
16h55 +00:00
2014-07-30
01h10 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:caucho:resin:4.0.40:*:*:*:professional:*:*:*

Informations

Vendor

caucho

Product

resin

Version

4.0.40

Software Edition

professional

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2010-2087 2010-05-27 18h32 +00:00 Oracle Mojarra 1.2_14 and 2.0.2, as used in IBM WebSphere Application Server, Caucho Resin, and other applications, does not properly handle an unencrypted view state, which allows remote attackers to conduct cross-site scripting (XSS) attacks or execute arbitrary Expression Language (EL) statements via vectors that involve modifying the serialized view object.
4.3