CVE-2011-4575

Опубликовано: 05 фев. 2013

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Комментарий

Per http://rhn.redhat.com/errata/RHSA-2013-0192.html "This JBoss Enterprise Application Platform 5.2.0 release serves as a replacement for JBoss Enterprise Application Platform 5.1.2, and includes bug fixes and enhancements."

Per http://rhn.redhat.com/errata/RHSA-2013-0196.html "This JBoss Enterprise Web Platform 5.2.0 release serves as a replacement for JBoss Enterprise Web Platform 5.1.2, and includes bug fixes and enhancements."

Ссылки

http://rhn.redhat.com/errata/RHSA-2013-0191.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0192.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0193.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0194.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0195.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0196.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0197.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0198.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0221.html
Vendor Advisory
http://secunia.com/advisories/51984
Vendor Advisory
http://secunia.com/advisories/52054
Vendor Advisory
http://www.osvdb.org/89578
http://www.securityfocus.com/bid/57548
https://bugzilla.redhat.com/show_bug.cgi?id=760387
http://rhn.redhat.com/errata/RHSA-2013-0191.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0192.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0193.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0194.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0195.html
Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2013-0196.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.2.0:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:*:*:*:*:*:*:*:*

Версия до 5.3.0 (включая)

EPSS

Процентиль: 79%

0.01272

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2011-4575

redhat

около 13 лет назад

GHSA-v4j8-rhv4-55m7

github

больше 3 лет назад