Improper Neutralization of Script in an Error Message Web Page

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. Journyx 11.5.4 - Reflected Cross Site ScriptingCVE-2024-6892Journyx · CVSS 6.1 · 0.8% likely
2. Keycloak: reflected xss attackCVE-2022-4137Red Hat · CVSS 8.1 · 1.2% likely

   Red Hat

3. Keycloak, an open-source identity and access management solution, has a cross-site scripting (XSS) vulnerability in the SAML or OIDC providers. The vulnerability can allow an atta…CVE-2022-4361keycloak · CVSS 10 · 0.7% likely

   Keycloak

4. Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13CVE-2019-25027Vaadin · CVSS 6.1 · 0.7% likely

   Vaadin

5. OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious projectCVE-2024-47882OpenRefine · CVSS 5.9 · 0.5% likely

   OpenRefine

6. A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arbitrary HTML tags and, possibly, execute…CVE-2025-24344Bosch Rexroth AG · CVSS 6.3 · 0.4% likely

   Bosch Rexroth AG

7. vulnerability has been discovered in OpenText™ Service Manager.CVE-2025-0883OpenText™ · CVSS 2.1 · 0.3% likely

   OpenText

8. Computer Vision Annotation Tool (CVAT) contains a reflected XSS via request endpointsCVE-2024-47064cvat-ai · CVSS 6.3 · 0.3% likely

   Cvat-Ai

9. Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568moby · CVSS 6.1 · 0.1% likely

   Moby

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.