dashbuilder

Dashbuilder Dashbuilder는 다음과 같은 기능을 제공하는 범용 대시보드 및 리포팅 웹 애플리케이션입니다: 대시보드의 시각적 구성 및 개인화 여러 차트 라이브러리를 사용한 다양한 유형의 시각화 지원 차트 시각화 정의를 위한 완전한 기능의 편집기 인터랙티브 리포트 테이블 정의 다양한 프로토콜을 통한 외부 시스템의 데이터 추출 분석 및 실시간 대시보드 모두 지원 Apache License, Version 2.0에 따라 라이선스가 부여됩니다. 자세한 내용은 프로젝트 웹 사이트 dashbuilder.org를 방문하십시오...

EUVD-2015-1940

Malware in sbrugna...

EUVD-2016-5964

Malware in sbrugna...

EUVD-2016-7270

Malware in sbrugna...

EUVD-2017-11806

Malware in sbrugna...

Cross site scripting

JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder usually admins to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of...

CVE-2016-6343

JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder usually admins to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of...

CVE-2016-6343

CVE-2016-6343 affects Red Hat JBoss BPM Suite 6 (dashbuilder). A reflected XSS vulnerability allows an authenticated admin to click a malicious link at /dashbuilder/Controller and execute script code in the user’s browser. The issue relies on dashbuilder’s handling of input in that endpoint; expl...

CVE-2016-6343

JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder usually admins to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of...

PT-2018-4938 · Red Hat · Jboss Bpm Suite

Name of the Vulnerable Software and Affected Versions: JBoss BPM Suite 6 Description: The issue allows remote attackers to perform a reflected XSS attack via dashbuilder. This can be achieved by enticing authenticated users, typically admins, to click on malicious links to the...

CVE-2016-6343: Improper Neutralization of Input During Web Page Generation

JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder usually admins to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of...

CVE-2017-2658

It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a use...

CVE-2017-2658

It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a use...

Design/Logic Flaw

It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a use...

CVE-2017-2658

The CVE affects Red Hat JBoss BPM Suite <6.4.2 and JBoss Data Virtualization & Services

CVE-2017-2658

It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a use...

PT-2018-7163 · Red Hat · Red Hat Jboss Data Virtualization & Services +1

Name of the Vulnerable Software and Affected Versions: Red Hat JBoss BPM Suite versions prior to 6.4.2 Red Hat JBoss Data Virtualization & Services versions prior to 6.4.3 Description: A security issue was found in the Dashbuilder login page, which could be opened in an IFRAME. This allowed for t...

CVE-2017-2658: Improper Input Validation

It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a use...

Dashbuilder: Lack of clickjacking protection on the login page

It was discovered that the Dashbuilder login page could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a user into performing arbitrary actions in the Console clickjacking...

Dashbuilder: insecure handling of CSRF token

It has been reported that CSRF tokens are not properly handled in JBoss BPM suite dashbuilder. Old tokens generated during an active session can be used to bypass CSRF protection. In addition, the tokens are sent in query string so they can be exposed through the browser's history, referrers, web...