Vulnerabilidades en vaadin

28 resultados
Análisis Vexday

Vaadin apresenta um portfólio moderado de 7 CVEs sem atividade de exploração documentada (0 em KEV) e sem críticas de severidade máxima, reduzindo o risco iminente. A fraqueza predominante é exposição de informação (CWE-200), padrão em frameworks web, com apenas 1 vulnerabilidade publicada nos últimos 90 dias, indicando evolução controlada do risco.

CVE-2021-31408MEDIUMServer session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19EPSS 0.3%CVE-2025-15022MEDIUMCross-site scripting in Action captionEPSS 0.3%CVE-2021-31403MEDIUMTiming side channel vulnerability in UIDL request handler in Vaadin 7 and 8EPSS 0.3%CVE-2021-33604LOWReflected cross-site scripting in development mode handler in Vaadin 14, 15-19EPSS 0.3%CVE-2021-31411MEDIUMInsecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19EPSS 0.2%CVE-2021-31406MEDIUMTiming side channel vulnerability in endpoint request handler in Vaadin 15-19EPSS 0.2%CVE-2021-31404MEDIUMTiming side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18EPSS 0.2%CVE-2026-7860LOWPossible information disclosure of environment variables in Vaadin Build Plugins via Failed Frontend BuildEPSS 0.1%