Maven org.owasp.esapi:esapi

Name: Maven org.owasp.esapi:esapi
Brand: Maven

productUS

pkg:maven/org.owasp.esapi/esapi

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

by severity

1critical0high3medium1low

updated 2026-10-28

vulnerabilities (5)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-23457US	critical9.8	2.85% (87th)	Exploit	2.3.0.0	2022-04-25	< 2.3.0.0
CVE-2022-24891US	medium6.1	1.71% (77th)	Exploit	2.3.0.0	2022-04-27	< 2.3.0.0
CVE-2013-5679US	low2.6	2.43% (84th)	—	2.1.0	2013-09-30	2.0.0 → 2.1.0
CVE-2013-5960US	medium5.8	1.65% (76th)	—	2.1.0.1	2013-09-30	2.0.0.0 → 2.1.0.1
CVE-2010-3300US	medium5.9	0.45% (39th)	—	2.0GA	2021-06-22	< 2.0GA

The flaw types (CWEs) most of these CVEs share.

CWE-310CWE-3102 CVEs
CWE-325Missing Cryptographic Step2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-649Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.