ESAPI
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| esapi-java-legacy | 2 | – | Jun 29, 2025 |
Exploited and recent CVEs
- CVE-2025-5878 ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element 0.5%
- CVE-2022-24891 Cross-site Scripting in org.owasp.esapi:esapi -- antisamy-esapi.xml configuration file 1.7%