Lucene search

Veracode Vulnerability DatabaseVERACODE:20549

HistoryJun 17, 2019 - 12:21 a.m.

Cross-site Scripting (XSS)

2019-06-1700:21:06

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

JSON

picketlink is vulnerable to cross-site scripting. A URL injection vulnerability via the xinclude parameter allows an attacker to inject arbitrary Javascript into a victim’s browser.

CPENameOperatorVersion
eap7-jboss-xnio-baseeq3.6.5__1.Final_redhat_00001.1.el8eap
eap7-jboss-xnio-baseeq3.5.5__1.Final_redhat_1.1.ep7.el6
eap7-jboss-xnio-baseeq3.3.6__1.Final_redhat_1.1.ep7.el6
eap7-jboss-xnio-baseeq3.4.4__1.Final_redhat_1.1.ep7.el7
eap7-jboss-xnio-baseeq3.6.5__1.Final_redhat_00001.1.el6eap
eap7-jboss-xnio-baseeq3.3.6__1.Final_redhat_1.1.ep7.el7
eap7-jboss-xnio-baseeq3.5.6__1.Final_redhat_00001.1.ep7.el7
eap7-jboss-xnio-baseeq3.4.0__1.Final_redhat_1.1.ep7.el6
eap7-jboss-xnio-baseeq3.4.7__1.Final_redhat_1.1.ep7.el7
eap7-jboss-xnio-baseeq3.4.1__2.Final_redhat_1.1.ep7.el7

Name	Operator	Version
eap7-jboss-xnio-base	eq	3.6.5__1.Final_redhat_00001.1.el8eap
eap7-jboss-xnio-base	eq	3.5.5__1.Final_redhat_1.1.ep7.el6
eap7-jboss-xnio-base	eq	3.3.6__1.Final_redhat_1.1.ep7.el6
eap7-jboss-xnio-base	eq	3.4.4__1.Final_redhat_1.1.ep7.el7
eap7-jboss-xnio-base	eq	3.6.5__1.Final_redhat_00001.1.el6eap
eap7-jboss-xnio-base	eq	3.3.6__1.Final_redhat_1.1.ep7.el7
eap7-jboss-xnio-base	eq	3.5.6__1.Final_redhat_00001.1.ep7.el7
eap7-jboss-xnio-base	eq	3.4.0__1.Final_redhat_1.1.ep7.el6
eap7-jboss-xnio-base	eq	3.4.7__1.Final_redhat_1.1.ep7.el7
eap7-jboss-xnio-base	eq	3.4.1__2.Final_redhat_1.1.ep7.el7

Rows per page:

1-10 of 4421

References

access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/

access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.2/html-single/installation_guide/

access.redhat.com/errata/RHSA-2019:1419

access.redhat.com/security/updates/classification/#moderate

issues.jboss.org/browse/JBEAP-16124

issues.jboss.org/browse/JBEAP-16139

issues.jboss.org/browse/JBEAP-16360

issues.jboss.org/browse/JBEAP-16362

issues.jboss.org/browse/JBEAP-16370

issues.jboss.org/browse/JBEAP-16453

issues.jboss.org/browse/JBEAP-16457

issues.jboss.org/browse/JBEAP-16470

issues.jboss.org/browse/JBEAP-16471

issues.jboss.org/browse/JBEAP-16473

issues.jboss.org/browse/JBEAP-16580

issues.jboss.org/browse/JBEAP-16622

issues.jboss.org/browse/JBEAP-16632

issues.jboss.org/browse/JBEAP-16633

issues.jboss.org/browse/JBEAP-16670

issues.jboss.org/browse/JBEAP-16709

issues.jboss.org/browse/JBEAP-16717

issues.jboss.org/browse/JBEAP-16720

issues.jboss.org/browse/JBEAP-16781

issues.jboss.org/browse/JBEAP-16860

issues.jboss.org/browse/JBEAP-16881

issues.jboss.org/browse/JBEAP-16882

9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

JSON

Related for VERACODE:20549