CWE-86: CWE-86
Yearly Trend
Top Affected Vendors
All CWE-86 CVEs (6)
A URL encoding vulnerability in Yokogawa's FAST/TOOLS industrial control system allows attackers to manipulate web pages or execute malicious scripts....
Feb 9, 2026This vulnerability in XWiki's XML library allows attackers to inject arbitrary HTML code through invalid data attributes, leading to cross-site script...
May 9, 2023This vulnerability in Intel Arc and Iris Xe Graphics software allows an unauthenticated attacker on the same network to potentially escalate privilege...
May 16, 2024This vulnerability allows malicious websites to crash Firefox browsers by including iframes with malformed URIs. It affects Firefox versions before 12...
Nov 6, 2024An authenticated cross-site scripting (XSS) vulnerability in Cisco CSPC's web management interface allows attackers with low-privileged accounts to in...
Jan 8, 2025This cross-site scripting (XSS) vulnerability in Cisco CSPC's web management interface allows authenticated attackers to inject malicious scripts. Att...
Jan 8, 2025About CWE-86 (CWE-86)
Our database tracks 6 CVEs classified as CWE-86, with 2 rated critical and 1 rated high severity. The average CVSS score for CWE-86 vulnerabilities is 7.3.
External reference: View CWE-86 on MITRE CWE →
Monitor CWE-86 Vulnerabilities
Get alerted when new CWE-86 CVEs affect your infrastructure.
Start Monitoring Free