Описание
Cross-site scripting (XSS) vulnerability in JBoss RichFaces, as used in JBoss Portal 6.1.1, allows remote attackers to inject arbitrary web script or HTML via crafted URL, which is not properly handled in a CSS file.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:redhat:jboss_enterprise_portal_platform:6.1.1:*:*:*:*:*:*:*
EPSS
Процентиль: 49%
0.00263
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
redhat
около 11 лет назад
Cross-site scripting (XSS) vulnerability in JBoss RichFaces, as used in JBoss Portal 6.1.1, allows remote attackers to inject arbitrary web script or HTML via crafted URL, which is not properly handled in a CSS file.
github
больше 3 лет назад
Cross-site scripting (XSS) vulnerability in JBoss RichFaces, as used in JBoss Portal 6.1.1, allows remote attackers to inject arbitrary web script or HTML via crafted URL, which is not properly handled in a CSS file.
EPSS
Процентиль: 49%
0.00263
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79