CVE-2010-3300: Owasp Enterprise Security API For Java

Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days.

It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.

Affected products

• Owasp Enterprise Security API For Java: before 2.0 (fixed in 2.0); version 2.0 only

Published 2021-06-22. Last modified 2026-06-16.