CVE-2014-3650

2022-07-0113:17:25

CWE-79

redhat

www.cve.org

0.001 Low

EPSS

Percentile

29.2%

JSON

Multiple persistent cross-site scripting (XSS) flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could use these flaws to compromise the application with specially crafted input.

CNA Affected

[
  {
    "product": "Jboss Aerogear",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Jboss Aerogear 1.0.0.final"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1144212

issues.redhat.com/browse/AEROGEAR-5978

0.001 Low

EPSS

Percentile

29.2%

JSON

Related for CVELIST:CVE-2014-3650