CWE-644: Improper Neutralization of HTTP Headers for Scripting Syntax
The product does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers, such as Flash.
A kind of CWE-116 Improper Encoding or Escaping of Output.
From the CWE List. © The MITRE Corporation.
Newest
- ibm datacap, datacap navigator +1 moreIBM Datacap Navigator HTTP HOST header injection6.5 Medium
- elspec g5 digital fault recorder, elspec-ltd g5dfr firmware +1 moreAn issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before....9.8 Critical
- ibm aspera faspexIBM Aspera Faspex HTTP header injection5.4 Medium
- greenpau caddy-securityImproper Neutralization of HTTP Headers in github.com/greenpau/caddy-security4.3 Medium
- ibm engineering lifecycle optimization, engineering lifecycle optimization - publishing +1 moreIBM Engineering Lifecycle Optimization HTTP header injection5.1 Medium
- arcadia technology, llc crafty controllerImproper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 47.5 High
- ibm tivoli application dependency discovery managerIBM Tivoli Application Dependency Discovery Manager HOST header injection10.0 Critical
- spring hateoas, vmware spring hateoas +1 moreForwarded header exploit with Spring HATEOAS on WebFlux5.3 Medium
- sap solution manager, sap se solution manager (diagnostic agent) +1 moreHeader Injection in SAP Solution Manager (Diagnostic Agent)7.2 High
- sap enable nowInformation Disclosure in SAP Enable Now5.3 Medium
- dell powerprotect cyber recoveryDell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker...8.8 High
- dell data protection central, emc data protection central, dp4400 firmware +1 more +3 moreDell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection...5.4 Medium
- ibm api connectIBM API Connect HOST header injection5.4 Medium
- ibm cics txIBM CICS TX information disclosure3.7 Low
- typo3HTTP Host Header Injection in Request Handling in Typo34.8 Medium
- voidtools everythingHTTP header injection vulnerability in Everything all versions except the Lite version may allow...6.1 Medium
- octobercms octoberOctober CMS vulnerable to Potential Host Header Poisoning on misconfigured servers6.8 Medium
- honeywell win-pakIn Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been...8.8 High
- certec edv gmbh atvise scadaA Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An ...8.8 High