Sign in Sign up
JA · EN · FR
SecPulse

Cwe 79

🧬 CWE Related 8,692
slug: cwe-79

Explanation

CWE-79は「Webアプリがユーザー入力をきちんと無害化せずに画面に出力してしまう欠陥」のことです。 結果として、攻撃者はWebページに悪意あるJavaScriptを埋め込めるようになり、見た人のCookie (ログイン情報) や入力情報を盗めるようになります。 対策はWebの基本中の基本: 出力時のHTMLエスケープです。
📌 Example
MySpace ワーム「Samy」 (2005): 1人の投稿が見るだけで他人のプロフィールにコピーされ、24時間で100万人に感染した。
🔗 Related links

🔖 Related tags

Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 8,773

Image ID Title
CVE-2026-75636 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-75636)
CVE-2026-75629 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-75629)
CVE-2026-72627 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-72627)
CVE-2026-72626 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-72626)
CVE-2026-71565 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-71565)
CVE-2026-71356 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-71356)
CVE-2026-71388 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-71388)
CVE-2026-71357 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-71357)
CVE-2026-71440 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-71440)
CVE-2026-27227 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-27227)
CVE-2026-19479 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-19479)
CVE-2026-19872 HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted...
CVE-2026-19612 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-19612)
CVE-2026-19713 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-19713)
CVE-2026-19644 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2026-19644)
CVE-2025-64866 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2025-64866)
CVE-2025-64868 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2025-64868)
CVE-2025-64610 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2025-64610)
CVE-2025-64618 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2025-64618)
CVE-2025-64830 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2025-64830)
CVE-2025-64589 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2025-64589)
CVE-2025-64588 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2025-64588)
CVE-2025-64584 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2025-64584)
CVE-2025-64838 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2025-64838)
CVE-2025-64854 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2025-64854)
CVE-2025-64542 Cross-Site Scripting (XSS) in Adobe Experience Manager (CVE-2025-64542)
CVE-2026-76200 Cross-Site Scripting (XSS) in Adobe Commerce (CVE-2026-76200)
CVE-2026-76201 Cross-Site Scripting (XSS) in Adobe Commerce (CVE-2026-76201)
CVE-2026-69642 Cross-Site Scripting (XSS) in Microsoft Skype For Business Server (CVE-2026-69642)
CVE-2026-63523 Cross-Site Scripting (XSS) in Microsoft Skype For Business Server (CVE-2026-63523)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details