htmlunit htmlunit

Name: htmlunit htmlunit
Brand: htmlunit

productUS

cpe:2.3:a:htmlunit:htmlunit:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

1critical5high0medium0low

updated 2026-10-27

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-5529US	high8.1	4.72% (92nd)	—	2.37.0	2020-02-11	< 2.37.0
CVE-2023-26119US	critical9.8	2.51% (85th)	—	3.0.0	2023-04-03	< 3.0.0
CVE-2023-49093US	high8.8	2.36% (84th)	—	3.9.0	2023-12-04	< 3.9.0
CVE-2022-28366US	high7.5	2.18% (82nd)	—	2.27	2022-04-21	< 2.27
CVE-2022-29546US	high7.5	1.23% (69th)	—	2.61.0	2022-04-25	< 2.61.0
CVE-2023-2798US	high7.5	0.91% (60th)	—	2.70.0	2023-05-25	< 2.70.0

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-665Improper Initialization1 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1 CVEs
CWE-770Allocation of Resources Without Limits or Throttling1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.