Cross-Site Scripting (XSS)

2020-04-1000:26:34

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON

jsf is vulnerable to cross-site scripting (XSS). The JavaServer Faces (JSF) component was vulnerable to multiple cross-site scripting (XSS) vulnerabilities. An attacker could use these flaws to inject arbitrary web script or HTML.

CPENameOperatorVersion
jbossaseq4.0.4__1.el4s1.25
jbossaseq4.0.4__1.el4s1.20
jbossaseq4.0.5__2.CP04.el4s1.2
jbossaseq4.2.0__3.GA_CP02.ep1.3.el4
jbossaseq4.2.0__1.ep1.9.el5
jbossaseq4.2.0__6.GA_CP09.11.1.ep1.el5
jbossaseq4.2.0__2.CP01.ep1.3.el5
jbossaseq4.2.0__6.GA_CP09.11.ep1.el4
jbossaseq4.2.0__4.GA_CP02.ep1.3.el5.3
jbossaseq4.0.5__1.el4s1.5

Name	Operator	Version
jbossas	eq	4.0.4__1.el4s1.25
jbossas	eq	4.0.4__1.el4s1.20
jbossas	eq	4.0.5__2.CP04.el4s1.2
jbossas	eq	4.2.0__3.GA_CP02.ep1.3.el4
jbossas	eq	4.2.0__1.ep1.9.el5
jbossas	eq	4.2.0__6.GA_CP09.11.1.ep1.el5
jbossas	eq	4.2.0__2.CP01.ep1.3.el5
jbossas	eq	4.2.0__6.GA_CP09.11.ep1.el4
jbossas	eq	4.2.0__4.GA_CP02.ep1.3.el5.3
jbossas	eq	4.0.5__1.el4s1.5