Cross-Site Scripting (XSS)

2019-03-2508:40:41

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

65.6%

JSON

Red Hat JBoss Operations Network is vulnerable to cross-site scripting (XSS). Lack of input validation in the Administration Interface allows remote attackers to inject arbitrary Javascript into a victim’s browser to steal session tokens or perform unwanted actions on behalf of the user.

CPENameOperatorVersion
rhq enterprise agent-server communications layereq4.2.0
rhq utilitieseq4.2.0

CPE	Name	Operator	Version
	rhq enterprise agent-server communications layer	eq	4.2.0
	rhq utilities	eq	4.2.0

References

rhn.redhat.com/errata/RHSA-2012-0089.html

secunia.com/advisories/47197

secunia.com/advisories/47280

securitytracker.com/id?1026435

bugzilla.redhat.com/show_bug.cgi?id=734662

0.003 Low

EPSS

Percentile

65.6%

JSON

Related for VERACODE:13509