CVE-2009-1380

2009-12-1500:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

71.3%

JSON

Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red
Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2
before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 allows remote attackers to
inject arbitrary web script or HTML via the filter parameter, related to
the key property and the position of quote and colon characters.