Lucene search

Veracode Vulnerability DatabaseVERACODE:23841

HistoryApr 10, 2020 - 12:37 a.m.

Cross-site Scripting (XSS)

2020-04-1000:37:33

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON

jboss is vulnerable to cross-site scripting (XSS). The vulnerability exists as an attacker could use these flaws to present misleading data to an authenticated user, or execute arbitrary scripting code in the context of the authenticated user’s browser session.

CPENameOperatorVersion
jboss-seameq1.2.0__1.AP.ep1.19.el5
jboss-seameq1.2.1__1.ep1.2.el5
jboss-seameq1.2.1__1.ep1.3.el5
jboss-seameq1.2.1__1.ep1.3.el4
glassfish-jsfeq1.2_10__0jpp.ep1.5.ep5.el5
glassfish-jsfeq1.2_10__0jpp.ep1.5.ep5.el4
glassfish-jsfeq1.2_04__1.p02.0jpp.ep1.18.el5
hibernate3eq3.2.4__1.SP1_CP02.0jpp.ep1.1.el5.1
hibernate3eq3.2.4__1.SP1_CP01.0jpp.ep1.1.el5.1
hibernate3eq3.2.4__1.SP1_CP02.0jpp.ep1.1.el4

Name	Operator	Version
jboss-seam	eq	1.2.0__1.AP.ep1.19.el5
jboss-seam	eq	1.2.1__1.ep1.2.el5
jboss-seam	eq	1.2.1__1.ep1.3.el5
jboss-seam	eq	1.2.1__1.ep1.3.el4
glassfish-jsf	eq	1.2_10__0jpp.ep1.5.ep5.el5
glassfish-jsf	eq	1.2_10__0jpp.ep1.5.ep5.el4
glassfish-jsf	eq	1.2_04__1.p02.0jpp.ep1.18.el5
hibernate3	eq	3.2.4__1.SP1_CP02.0jpp.ep1.1.el5.1
hibernate3	eq	3.2.4__1.SP1_CP01.0jpp.ep1.1.el5.1
hibernate3	eq	3.2.4__1.SP1_CP02.0jpp.ep1.1.el4

Rows per page:

1-10 of 1201

References

secunia.com/advisories/35680

secunia.com/advisories/37671

securitytracker.com/id?1023315

www.osvdb.org/60898

www.osvdb.org/60899

www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/

www.redhat.com/security/updates/classification/#moderate

www.securityfocus.com/bid/37276

access.redhat.com/errata/RHSA-2009:1636

access.redhat.com/errata/RHSA-2009:1637

access.redhat.com/errata/RHSA-2009:1649

access.redhat.com/errata/RHSA-2009:1650

access.redhat.com/security/cve/CVE-2009-2405

bugzilla.redhat.com/show_bug.cgi?id=510023

exchange.xforce.ibmcloud.com/vulnerabilities/54700

jira.jboss.org/jira/browse/JBAS-7105

jira.jboss.org/jira/browse/JBPAPP-2274

jira.jboss.org/jira/browse/JBPAPP-2284

rhn.redhat.com/errata/RHSA-2009-1636.html

rhn.redhat.com/errata/RHSA-2009-1637.html

rhn.redhat.com/errata/RHSA-2009-1649.html

rhn.redhat.com/errata/RHSA-2009-1650.html

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

JSON

Related for VERACODE:23841