Cross-Site Scripting (XSS)

Red Hat Certificate System RHCS is vulnerable to cross-site scripting. It does not escape the 1 pageStart or 2 pageSize to the displayCRL script, or 3 nonce variable to the profileProcess script, allowing the attack against via Certificate System's web interface...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Red Hat Certificate System RHCS before 8.1.3 allow remote attackers to inject arbitrary web script or HTML via the 1 pageStart or 2 pageSize to the displayCRL script, or 3 nonce variable to the profileProcess script...