com.coherentlogic.fred.client:fred-client-core (0.9.3), com.coherentlogic.fred.client:fred-client-core-it (0.9.3) +25 more potentially affected by CVE-2013-6235 via com.jamonapi:jamon (>=2.0, <=2.75)

com.jamonapi:jamon MAVEN version =2.0, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.1.4, =0.9.0, =0.9.1 and more Source cves: CVE-2013-6235 Source advisory: OSV:GHSA-QPR7-5M63-HQ2Chttps://vulners.com/osvghsa/OSV:GHSA-Q...

org.springframework:spring-aop (>=1.2.1, <=1.2.4), org.springframework:spring-context (>=1.2.1, <=1.2.4) +9 more potentially affected by CVE-2013-6235 via com.jamonapi:jamon (1.0)

com.jamonapi:jamon MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.jamonapi:jamon and may be impacted: - org.springframework:spring-aop =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.1, =1.2.4...

com.coherentlogic.fred.client:fred-client-core (0.9.3), com.coherentlogic.fred.client:fred-client-core-it (0.9.3) +25 more potentially affected by CVE-2013-6235 via com.jamonapi:jamon (>=2.0, <=2.75)

com.jamonapi:jamon MAVEN version =2.0, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.1.4, =0.9.0, =0.9.1 and more Source cves: CVE-2013-6235 Source advisory: GHSA-QPR7-5M63-HQ2Chttps://vulners.com/github/GHSA-QPR7-5M63-H...

CVE-2013-6235

Multiple cross-site scripting XSS vulnerabilities in JAMon Java Application Monitor 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 listenertype or 2 currentlistener parameter to mondetail.jsp or ArraySQL parameter to 3 mondetail.jsp, 4 jamonadmin.jsp, 5...

com.coherentlogic.fred.client:fred-client-core (0.9.3), com.coherentlogic.fred.client:fred-client-core-it (0.9.3) +36 more potentially affected by CVE-2013-6235 via com.jamonapi:jamon (>=1.0, <=2.75)

com.jamonapi:jamon MAVEN version =1.0, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.3.0-rc1, =1.1.4, =0.9.0, =0.9.1 and more Source cves: CVE-2013-6235 Source advisory: MEND:CVE-2013-6235...

CVE-2013-6235

CVE-2013-6235 refers to multiple reflected XSS vulnerabilities in JAMon (Java Application Monitor) v2.7 and earlier. The flaw allows remote attackers to inject arbitrary script/HTML via unsanitized input in parameters such as listenertype and currentlistener (in mondetail.jsp) and ArraySQL (in mo...

JAMon 2.7 Cross Site Scripting

Advisory Information Title: Multiple Reflected XSS vulnerabilities in JAMon Date published: 2013-01-23 Date of last update: 2013-01-23 Vendors contacted: JAMon v 2.7 Discovered by: Christian Catalano Severity: Low 02. Vulnerability Information CVE reference: CVE-2013-6235 CVSS v2 Base Score:...