CWE-81

9 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 1High 1Medium 6Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2026-41568
Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap
moby · moby
Medium6.1
CVE-2025-24344
A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arbitrary HTML tags…
Bosch Rexroth AG · ctrlX OS - Solutions
Medium6.3
CVE-2025-0883
vulnerability has been discovered in OpenText™ Service Manager.
OpenText™ · Service Manager
Low2.1
CVE-2024-47882
OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project
OpenRefine · OpenRefine
Medium5.9
CVE-2024-47064
Computer Vision Annotation Tool (CVAT) contains a reflected XSS via request endpoints
cvat-ai · cvat
Medium6.3
CVE-2024-6892
Journyx Reflected Cross Site Scripting
Journyx · Journyx (jtime)
Medium6.1
CVE-2022-4137
Keycloak: reflected xss attack
Red Hat · Red Hat Single Sign-On 7
High8.1
CVE-2022-4361
Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The…
keycloak · keycloak
Critical10.0
CVE-2019-25027
Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13
Vaadin · Vaadin
Medium6.1