description: It was found that all OWASP ESAPI for Java up to version 2.0 RC2 are vulnerable to padding oracle attacks.
problem types: CWE-649
affected:
{
product: OWASP ESAPI
vendor: n/a
versions:
status: affected, version: OWASP ESAPI for Java up to version 2.0 RC2
}