54 matches found
dashbuilder
Dashbuilder Dashbuilder is a general purpose dashboard and reporting web app which allows for: Visual configuration and personalization of dashboards Support for different types of visualizations using several charting libraries Full featured editor for the definition of chart visualizations...
EUVD-2016-7270
Malware in sbrugna...
EUVD-2016-5964
Malware in sbrugna...
EUVD-2017-11806
Malware in sbrugna...
EUVD-2015-1940
Malware in sbrugna...
br.eti.clairton:ds-test (0.4.0), com.bertoncelj.wildflysingletonservice:wildfly-singleton-service (>=1.2.0, <=1.2.1) +101 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (2.2.0.final)
org.wildfly.core:wildfly-controller MAVEN version 2.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - br.eti.clairton:ds-test 0.4.0 -...
org.dashbuilder:dashbuilder-all (>=0.3.0.cr1, <=1.0.0.final), org.dashbuilder:dashbuilder-client-all (>=0.6.0.beta7, <=1.0.0.final) +270 more potentially affected by CVE-2023-38647 via org.apache.helix:helix-core (0.6.5)
org.apache.helix:helix-core MAVEN version 0.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.helix:helix-core and may be impacted: - org.dashbuilder:dashbuilder-all =0.3.0.cr1, =0.6.0.beta7, =0.6.0.beta7, =0.4.0.beta1, =0.3.0.cr1,...
CVE-2016-6343
JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder usually admins to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of...
Cross site scripting
JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder usually admins to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of...
CVE-2016-6343
JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder usually admins to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of...
CVE-2016-6343
CVE-2016-6343 affects Red Hat JBoss BPM Suite 6 (dashbuilder). A reflected XSS vulnerability allows an authenticated admin to click a malicious link at /dashbuilder/Controller and execute script code in the user’s browser. The issue relies on dashbuilder’s handling of input in that endpoint; expl...
CVE-2016-6343: Improper Neutralization of Input During Web Page Generation
JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder usually admins to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of...
PT-2018-4938 · Red Hat · Jboss Bpm Suite
Name of the Vulnerable Software and Affected Versions: JBoss BPM Suite 6 Description: The issue allows remote attackers to perform a reflected XSS attack via dashbuilder. This can be achieved by enticing authenticated users, typically admins, to click on malicious links to the...
CVE-2017-2658
It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a use...
CVE-2017-2658
It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a use...
Design/Logic Flaw
It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a use...
CVE-2017-2658
The CVE affects Red Hat JBoss BPM Suite <6.4.2 and JBoss Data Virtualization & Services
CVE-2017-2658
It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a use...
PT-2018-7163 · Red Hat · Red Hat Jboss Data Virtualization & Services +1
Name of the Vulnerable Software and Affected Versions: Red Hat JBoss BPM Suite versions prior to 6.4.2 Red Hat JBoss Data Virtualization & Services versions prior to 6.4.3 Description: A security issue was found in the Dashbuilder login page, which could be opened in an IFRAME. This allowed for t...
CVE-2017-2658: Improper Input Validation
It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Services before 6.4.3 could be opened in an IFRAME, which made it possible to intercept and manipulate requests. An attacker could use this flaw to trick a use...