T1059.007Execution
JavaScript
Adversaries may abuse various implementations of JavaScript for execution. JavaScript (JS) is a platform-independent scripting language (compiled just-in-time at runtime) commonly associated with scripts in webpages, though JS can be executed in runtime environments outside the browser. JScript is the Microsoft implementation of the same scripting standard. JScript is interpreted via the Windows…
CVEs60
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.31
Reports1
Detections
29 Sigma rules tagged T1059.007JavaScriptT1059.00729 general rules
- Adwind RAT / JRAThightest
- Adwind RAT / JRAT File Artifacthightest
- Csc.EXE Execution Form Potentially Suspicious Parenthightest
- Cscript/Wscript Uncommon Script Extension Executionhightest
- HackTool - CACTUSTORCH Remote Thread Creationhightest
- HackTool - Koadic Executionhightest
- HTML Help HH.EXE Suspicious Child Processhightest
- JXA In-memory Execution Via OSAScripthightest
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to JavaScript
60 CVEs, by priority. Each link shows its badge.- CVE-2016-0189Microsoft Internet Explorer Memory Corruption VulnerabilityMicrosoft · Internet ExplorerKEVRansomwarePublic exploitHigh · 7.5T1189Drive-by CompromiseT1059.007JavaScript1 reportAI mapping from the description · primary impact94.1%Top 0.15%82.1priority
- CVE-2023-22515Atlassian Confluence Data Center and Server Broken Access Control VulnerabilityAtlassian · Confluence Data Center and ServerKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts+3 moreMITRE CTID mapping of the KEV entry · primary impact99.2%Top 0.07%79.8priority
- CVE-2019-18426WhatsApp Cross-Site Scripting VulnerabilityMeta Platforms · WhatsAppKEVPublic exploitHigh · 8.2T1204.001Malicious LinkT1059.007JavaScript+1 moreAI mapping from the description · primary impact67.9%Top 0.68%78.6priority
- CVE-2022-24682Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilitySynacor · Zimbra Collaborate Suite (ZCS)KEVRansomwarePublic exploitMedium · 6.1T1204.001Malicious LinkT1059.007JavaScript+1 moreMITRE CTID mapping of the KEV entry · primary impact30.9%Top 1.7%76.9priority
- CVE-2015-5119Adobe Flash Player Use-After-Free VulnerabilityAdobe · Flash PlayerKEVPublic exploitEnd of lifeCritical · 9.8T1566.002Spearphishing LinkT1059.007JavaScript+3 more · 5 reportsMITRE CTID mapping of the KEV entry · how it is exploited98.6%Top 0.08%74.8priority
- CVE-2026-42897Microsoft Exchange Server Cross-Site Scripting VulnerabilityAI mapping from the description · primary impact70.7%Top 0.61%72.1priority
- CVE-2018-19953QNAP NAS File Station Cross-Site Scripting VulnerabilityQNAP · Network Attached Storage (NAS)KEVRansomwareMedium · 6.1T1189Drive-by CompromiseT1059.007JavaScriptAI mapping from the description · primary impact30.5%Top 1.8%71.9priority
- CVE-2025-68461RoundCube Webmail Cross-site Scripting VulnerabilityAI mapping from the description · primary impact27.4%Top 1.9%71.9priority
- CVE-2018-19943QNAP NAS File Station Cross-Site Scripting VulnerabilityQNAP · Network Attached Storage (NAS)KEVRansomwareMedium · 5.4T1189Drive-by CompromiseT1059.007JavaScriptAI mapping from the description · primary impact22.7%Top 2.3%71.3priority
- CVE-2022-27926Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilitySynacor · Zimbra Collaboration Suite (ZCS)KEVPublic exploitMedium · 6.1T1189Drive-by CompromiseT1059.007JavaScript1 reportAI mapping from the description · primary impact17.6%Top 2.9%70.6priority
- CVE-2025-34028Commvault Command Center Path Traversal VulnerabilityCommvault · Command CenterKEVPublic exploitCritical · 10.0T1190Exploit Public-Facing ApplicationT1059.007JavaScriptMITRE CTID mapping of the KEV entry · primary impact97.6%Top 0.1%70.0priority
- CVE-2022-22963VMware Tanzu Spring Cloud Function Remote Code Execution VulnerabilityVMware Tanzu · Spring CloudKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.007JavaScript+1 moreMITRE CTID mapping of the KEV entry · primary impact99.9%Top 0.03%69.9priority
- CVE-2010-3765Mozilla Multiple Products Remote Code Execution VulnerabilityAI mapping from the description · primary impact83.2%Top 0.32%69.8priority
- CVE-2023-26360Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityAdobe · ColdFusionKEVPublic exploitHigh · 8.6T1190Exploit Public-Facing ApplicationT1059.007JavaScript+7 moreMITRE CTID mapping of the KEV entry · primary impact97.3%Top 0.1%69.0priority
- CVE-2021-37975Google Chromium V8 Use-After-Free VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1059.007JavaScriptT1203Exploitation for Client ExecutionMITRE CTID mapping of the KEV entry · how it is exploited34.9%Top 1.6%68.8priority
- CVE-2021-21148Google Chromium V8 Heap Buffer Overflow VulnerabilityGoogle · Chromium V8KEVPublic exploitHigh · 8.8T1059.007JavaScriptT1203Exploitation for Client ExecutionMITRE CTID mapping of the KEV entry · how it is exploited20.0%Top 2.6%68.6priority
- CVE-2015-2419Microsoft Internet Explorer Memory Corruption VulnerabilityMicrosoft · Internet ExplorerKEVPublic exploitEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1059.007JavaScript1 reportAI mapping from the description · primary impact53.0%Top 1%67.8priority
- CVE-2020-11023JQuery Cross-Site Scripting (XSS) VulnerabilityMITRE CTID mapping of the CVE · primary impact84.9%Top 0.29%67.2priority
- CVE-2024-37383RoundCube Webmail Cross-Site Scripting (XSS) VulnerabilityAI mapping from the description · primary impact74.0%Top 0.52%67.2priority
- CVE-2023-37580Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilitySynacor · Zimbra Collaboration Suite (ZCS)KEVPublic exploitMedium · 6.1T1204.001Malicious LinkT1059.007JavaScriptAI mapping from the description · primary impact49.1%Top 1.1%67.0priority
- CVE-2025-66376Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilitySynacor · Zimbra Collaboration Suite (ZCS)KEVMedium · 6.1T1566.001Spearphishing AttachmentT1059.007JavaScriptAI mapping from the description · primary impact20.2%Top 2.5%66.8priority
- CVE-2023-5631Roundcube Webmail Persistent Cross-Site Scripting (XSS) VulnerabilityMITRE CTID mapping of the KEV entry · primary impact76.3%Top 0.46%66.7priority
- CVE-2021-26829OpenPLC ScadaBR Cross-site Scripting VulnerabilityAI mapping from the description · primary impact48.0%Top 1.1%66.6priority
- CVE-2018-4990Adobe Acrobat and Reader Double Free VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited35.9%Top 1.5%63.9priority
- CVE-2021-21166Google Chromium Race Condition VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited24.0%Top 2.2%63.7priority
- CVE-2021-21206Google Chromium Blink Use-After-Free VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited9.3%Top 4.6%63.2priority
- CVE-2021-30554Google Chromium WebGL Use-After-Free VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited7.4%Top 5.6%63.0priority
- CVE-2025-48700Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting VulnerabilitySynacor · Zimbra Collaboration Suite (ZCS)KEVMedium · 6.1T1566.002Spearphishing LinkT1059.007JavaScript+1 moreAI mapping from the description · primary impact1.7%Top 23%62.7priority
- CVE-2014-2120Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) VulnerabilityAI mapping from the description · primary impact22.6%Top 2.3%61.8priority
- CVE-2013-3346Adobe Reader and Acrobat Memory Corruption VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited78.9%Top 0.41%54.8priority
- CVE-2013-3893Microsoft Internet Explorer Resource Management Errors VulnerabilityMicrosoft · Internet ExplorerKEVPublic exploitEnd of lifeHigh · 8.8T1189Drive-by CompromiseT1059.007JavaScriptAI mapping from the description · primary impact87.6%Top 0.24%54.1priority
- CVE-2019-3708Cross-Site Scripting Vulnerability in OVA file upload featureDell EMC · Dell EMC IsilonSD Management ServerHigh · 8.3T1204.001Malicious LinkT1059.007JavaScript+1 moreMITRE CTID mapping of the CVE · primary impact2.2%Top 17%22.4priority
- CVE-2018-11059RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerabilityMITRE CTID mapping of the CVE · primary impact1.4%Top 28%20.1priority
- CVE-2019-18578Dell EMC XtremIO XMS versions prior to 6.3.0 contain a stored cross-site scripting vulnerabilityMITRE CTID mapping of the CVE · primary impact1.1%Top 34%19.6priority
- CVE-2020-11082Cross-Site Scripting in KaminariMITRE CTID mapping of the CVE · primary impact1.5%Top 25%19.5priority
- CVE-2020-11030Cross-site scripting (XSS) in Search block in WordPressMITRE CTID mapping of the CVE · primary impact1.4%Top 27%19.1priority
- CVE-2018-11075DSA-2018-152: RSA® Authentication Manager Multiple VulnerabilitiesMITRE CTID mapping of the CVE · primary impact1.5%Top 26%18.9priority
- CVE-2019-1941Cisco Identity Services Engine Cross-Site Scripting VulnerabilityCisco · Cisco Identity Services Engine SoftwareMedium · 6.1T1204.001Malicious LinkT1059.007JavaScript+1 moreMITRE CTID mapping of the CVE · primary impact1.3%Top 30%18.2priority
- CVE-2018-11073DSA-2018-152: RSA® Authentication Manager Multiple VulnerabilitiesMITRE CTID mapping of the CVE · primary impact1.1%Top 34%17.7priority
- CVE-2018-15393Cisco Content Security Management Appliance (SMA) Cross-Site Scripting VulnerabilityCisco · Cisco Content Security Management Appliance (SMA)Medium · 4.8T1204.001Malicious LinkT1059.007JavaScript+1 moreMITRE CTID mapping of the CVE · primary impact1.2%Top 31%17.2priority
- CVE-2020-3121Cisco Small Business Smart and Managed Switches Cross-Site Scripting VulnerabilityCisco · Cisco 550X Series Stackable Managed SwitchesMedium · 6.1T1204.001Malicious LinkT1059.007JavaScript+1 moreMITRE CTID mapping of the CVE · primary impact1.1%Top 35%17.2priority
- CVE-2020-11036XSS in GLPIMITRE CTID mapping of the CVE · primary impact0.8%Top 43%16.7priority
- CVE-2019-3754Dell EMC Unity Operating Environment versions prior to 5.0.0.0.5.116, Dell EMC UnityVSA versions prior to…MITRE CTID mapping of the CVE · primary impact1.1%Top 34%16.5priority
- CVE-2019-1665Cisco Hyperflex Stored Cross-Site Scripting VulnerabilityMITRE CTID mapping of the CVE · primary impact1.1%Top 35%16.4priority
- CVE-2020-3137Cisco Email Security Appliance Cross-Site Scripting VulnerabilityCisco · Cisco Email Security Appliance (ESA)Medium · 6.1T1204.001Malicious LinkT1059.007JavaScript+1 moreMITRE CTID mapping of the CVE · primary impact0.8%Top 42%15.8priority
- CVE-2020-3356Cisco Data Center Network Manager Stored Cross-Site Scripting VulnerabilityCisco · Cisco Data Center Network ManagerMedium · 6.1T1204.001Malicious LinkT1059.007JavaScript+1 moreMITRE CTID mapping of the CVE · primary impact0.8%Top 43%15.6priority
- CVE-2019-1838Cisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting VulnerabilityCisco · Cisco Application Policy Infrastructure Controller (APIC)Medium · 5.4T1204.001Malicious LinkT1059.007JavaScript+1 moreMITRE CTID mapping of the CVE · primary impact0.8%Top 43%15.2priority
- CVE-2019-15994Cisco Stealthwatch Enterprise Cross-Site Scripting VulnerabilityMITRE CTID mapping of the CVE · primary impact0.8%Top 43%15.1priority
- CVE-2020-3233Cisco IOx Application Framework Local Manager Stored Cross-Site Scripting VulnerabilityMITRE CTID mapping of the CVE · primary impact0.6%Top 50%14.5priority
- CVE-2020-5270Open redirection when using back parameter of PrestaShopMITRE CTID mapping of the CVE · follow-on activity0.8%Top 42%14.4priority
- CVE-2020-5269Reflected XSS on AdminFeatures page of PrestaShopMITRE CTID mapping of the CVE · primary impact0.8%Top 43%14.2priority
- CVE-2020-5271Reflected XSS with dashboard calendar of PrestaShopMITRE CTID mapping of the CVE · primary impact0.8%Top 43%14.2priority
- CVE-2020-5264Reflected XSS in security compromised page of PrestaShopMITRE CTID mapping of the CVE · primary impact0.8%Top 45%14.1priority
- CVE-2020-5336RSA Archer, versions prior to 6.7 P1 (6.7.0.1), contain a URL injection vulnerabilityMITRE CTID mapping of the CVE · primary impact0.7%Top 47%13.9priority
- CVE-2020-5339RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the…MITRE CTID mapping of the CVE · primary impact0.7%Top 48%13.7priority
- CVE-2020-5340RSA Authentication Manager versions prior to 8.4 P10 contain a stored cross-site scripting vulnerability in the…MITRE CTID mapping of the CVE · primary impact0.7%Top 48%13.7priority
- CVE-2019-15280Cisco Firepower Management Center Software Stored Cross-Site Scripting VulnerabilityCisco · Cisco Firepower Management CenterMedium · 4.8T1189Drive-by CompromiseT1059.007JavaScript+1 moreMITRE CTID mapping of the CVE · primary impact0.6%Top 50%13.3priority
- CVE-2020-3349Cisco Data Center Network Manager Cross-Site Scripting VulnerabilitiesCisco · Cisco Data Center Network ManagerMedium · 4.8T1204.001Malicious LinkT1059.007JavaScript+1 moreMITRE CTID mapping of the CVE · primary impact0.6%Top 50%13.3priority
- CVE-2020-5266Stored XSS on back office edit pageMITRE CTID mapping of the CVE · primary impact0.6%Top 49%13.2priority
- CVE-2019-18571The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a…Dell · RSA Identity Governance & LifecycleMedium · 5.4T1204.002Malicious FileT1059.007JavaScript+1 moreMITRE CTID mapping of the CVE · primary impact0.5%Top 57%12.4priority