Описание
Cross-site scripting (XSS) vulnerability in JBoss RichFaces, as used in JBoss Portal 6.1.1, allows remote attackers to inject arbitrary web script or HTML via crafted URL, which is not properly handled in a CSS file.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:redhat:jboss_enterprise_portal_platform:6.1.1:*:*:*:*:*:*:*
EPSS
Процентиль: 59%
0.00974
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
redhat
больше 11 лет назад
Cross-site scripting (XSS) vulnerability in JBoss RichFaces, as used in JBoss Portal 6.1.1, allows remote attackers to inject arbitrary web script or HTML via crafted URL, which is not properly handled in a CSS file.
github
около 4 лет назад
Cross-site scripting (XSS) vulnerability in JBoss RichFaces, as used in JBoss Portal 6.1.1, allows remote attackers to inject arbitrary web script or HTML via crafted URL, which is not properly handled in a CSS file.
EPSS
Процентиль: 59%
0.00974
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79