CWE-917: EL Injection
The product constructs all or part of an expression language (EL) statement in a framework such as a Java Server Page (JSP) using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended EL statement before it is executed.
Also known as Improper Neutralization of Special Elements used in an Expression Language Statement, Expression Language Injection.
A kind of CWE-77 Command injection.
From the CWE List. © The MITRE Corporation.
Newest
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA thirdpartyperfselecttask expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA mediaforaction expression language injection remote code execution vulnerability was discovered...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA wmiconfigcontent expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA viewtaskresultdetailfact expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA iccselectdymicparam expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA soapconfigcontent expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA actionselectcontent expression language injection remote code execution vulnerability was...8.8 High
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA templateselect expression language injection remote code execution vulnerability was discovered...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA guidatadetail expression language injection remote code execution vulnerability was discovered...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA select expression language injection remote code execution vulnerability was discovered in HPE...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA ictexpertcsvdownload expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA selectusergroup expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA quicktemplateselect expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA operatorgrouptreeselectcontent expression language injection remote code execution...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA iccselectcommand expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA operationselect expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA navigationto expression language injection remote code execution vulnerability was discovered...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA operatorgroupselectcontent expression language injection remote code execution vulnerability...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA reporttaskselect expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA iccselectdeviceseries expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA customtemplateselect expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA perfselecttask expression language injection remote code execution vulnerability was discovered...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA selviewnavcontent expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA faultinfo_content expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA select expression language injection remote code execution vulnerability was discovered in HPE...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA ifviewselectpage expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA iccselectdevtype expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA faultparasset expression language injection remote code execution vulnerability was discovered...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA faulttrapgroupselect expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA faultstatchoosefaulttype expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA ictexpertcsvdownload expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA deployselectsoftware expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA deployselectbootrom expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA devgroupselect expression language injection remote code execution vulnerability was discovered...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA chooseperfview expression language injection remote code execution vulnerability was discovered...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA comparefilesresult expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA faultdevparasset expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA eventinfo_content expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA adddevicetoview expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA addvsiinterfaceinfo expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA syslogtempletselectwin expression language injection remote code execution vulnerability was...9.8 Critical
- hp intelligent management center, hpe intelligent management center (imc) +1 moreA legend expression language injection remote code execution vulnerability was discovered in HPE...9.8 Critical
- sylius syliusresourcebundleRemote Code Execution in SyliusResourceBundle7.7 High
- sylius syliusresourcebundleRemote Code Execution in SyliusResourceBundle9.6 Critical
- netflix titusNetflix Titus, all versions prior to version v0.1.1-rc.274, uses Java Bean Validation (JSR 380)...9.8 Critical
- netflix conductorExpression Language Injection in Netflix Conductor9.8 Critical
- vmware vcloud directorVMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and...8.8 High
- apache syncopeExpression Language Injection in Apache Syncope9.8 Critical
- sonatype nexus, nexus repository +1 moreNexus Repository Manager 3 - Remote Code Execution8.8 High
- fusionauthAn issue was discovered in FusionAuth before 1.11.0. An authenticated user, allowed to edit e...7.2 High
- Show moreLoading…