Логотип exploitDog
bind:CVE-2015-5178
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2015-5178

Количество 4

Количество 4

redhat логотип

CVE-2015-5178

больше 10 лет назад

The Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.

CVSS2: 2.9
EPSS: Низкий
nvd логотип

CVE-2015-5178

больше 10 лет назад

The Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.

CVSS2: 4.3
EPSS: Низкий
github логотип

GHSA-9x2p-wcwc-h875

больше 3 лет назад

The Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.

EPSS: Низкий
fstec логотип

BDU:2015-11963

больше 10 лет назад

Уязвимость Java-сервера приложений WildFly и связующей платформы JBoss Enterprise Application Platform, позволяющая нарушителю проводить clickjacking-атаки

CVSS2: 4.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2015-5178

The Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.

CVSS2: 2.9
1%
Низкий
больше 10 лет назад
nvd логотип
CVE-2015-5178

The Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.

CVSS2: 4.3
1%
Низкий
больше 10 лет назад
github логотип
GHSA-9x2p-wcwc-h875

The Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.

1%
Низкий
больше 3 лет назад
fstec логотип
BDU:2015-11963

Уязвимость Java-сервера приложений WildFly и связующей платформы JBoss Enterprise Application Platform, позволяющая нарушителю проводить clickjacking-атаки

CVSS2: 4.3
1%
Низкий
больше 10 лет назад

Уязвимостей на страницу