Vulnerabilities in Vaadin

28 results
Vexday analysis

Vaadin apresenta 21 vulnerabilidades registradas, nenhuma em exploração ativa ou com severidade crítica, indicando risco contido. A fraqueza dominante é CWE-400 (controle impróprio de recursos), típica de problemas de negação de serviço, sem alertas recentes de publicação nos últimos 90 dias.

CVE-2021-31408MEDIUMServer session is not invalidated when logout() helper method of Authentication module is used in Vaadin 18-19EPSS 0.3%CVE-2025-15022MEDIUMCross-site scripting in Action captionEPSS 0.3%CVE-2021-31403MEDIUMTiming side channel vulnerability in UIDL request handler in Vaadin 7 and 8EPSS 0.3%CVE-2021-33604LOWReflected cross-site scripting in development mode handler in Vaadin 14, 15-19EPSS 0.3%CVE-2021-31411MEDIUMInsecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19EPSS 0.2%CVE-2021-31406MEDIUMTiming side channel vulnerability in endpoint request handler in Vaadin 15-19EPSS 0.2%CVE-2021-31404MEDIUMTiming side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18EPSS 0.2%CVE-2026-7860LOWPossible information disclosure of environment variables in Vaadin Build Plugins via Failed Frontend BuildEPSS 0.1%