Owasp Enterprise Security Api vulnerabilities

• owasp enterprise security api, esapi esapi-java-legacy, netapp active iq unified manager +2 more +4 more Cross-site Scripting in org.owasp.esapi:esapi -- antisamy-esapi.xml configuration file CVE-2022-24891 Public exploitFix available 5.4 MediumApril 27, 2022
• owasp enterprise security api, netapp active iq unified manager, oncommand workflow automation +2 more +4 more Path Traversal in ESAPI CVE-2022-23457 Public exploitFix available 7.5 HighApril 25, 2022
• owasp enterprise security api for java Padding oracle attacks CVE-2010-3300 Fix available 5.9 MediumJune 22, 2021
• owasp enterprise security api Missing Cryptographic Step in OWASP Enterprise Security API for Java CVE-2013-5960 Fix available 5.8 MediumSeptember 30, 2013
• owasp enterprise security api Missing Cryptographic Step in OWASP Enterprise Security API for Java CVE-2013-5679 Fix available 2.6 LowSeptember 30, 2013