CVE-2012-5920

CVE-2012-5920 is an XSS vulnerability in Google Web Toolkit (GWT) 2.4–2.5 Final, used in JBoss Operations Network 3.1.1 and potentially other products. It stems from an incomplete fix for CVE-2012-4563 and allows remote attackers to inject arbitrary script/HTML via unspecified vectors. Red Hat/IB...

CVE-2012-4563

CVE-2012-4563 is an XSS vulnerability in Google Web Toolkit (GWT) 2.4 Beta and release candidates prior to 2.4.0. An attacker could inject arbitrary script/HTML via unspecified vectors. The issue is noted as an incomplete fix in related advisories, and the recommended remediation is to upgrade to...