Lucene search
GitHub Advisory DatabaseGHSA-VV6J-5X58-Q2C3HistoryMay 01, 2022 - 11:38 p.m.
Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF)
2022-05-0123:38:35
CWE-79
GitHub Advisory Database
github.com
30
cross-site scripting
vulnerability
sun java server faces
remote attackers
web script
html
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.003
Percentile
71.7%
Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected configurations
Node
com.sun.facesjsf-apiRange<1.2.08
| Vendor | Product | Version | CPE |
|---|---|---|---|
| com.sun.faces | jsf-api | * | cpe:2.3:a:com.sun.faces:jsf-api:*:*:*:*:*:*:*:* |
Related
osv
osv
Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF)
2022-05-01 23:38:35
cvelist
cvelist
CVE-2008-1285
2008-03-11 17:00:00
nvd
nvd
CVE-2008-1285
2008-03-11 17:44:00
cve
cve
CVE-2008-1285
2008-03-11 17:44:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-04-10 00:26:34
prion
prion
Cross site scripting
2008-03-11 17:44:00
redhat
redhat
nessus
nessus
RHEL 4 : JBoss EAP (RHSA-2008:0825)
2013-01-24 00:00:00
RHEL 5 : JBoss EAP (RHSA-2008:0828)
2013-01-24 00:00:00
RHEL 4 : JBoss EAP (RHSA-2008:0826)
2013-01-24 00:00:00
seebug
seebug
JBoss Enterprise Application Platform信息泄漏漏洞
2008-08-06 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
0.003
Percentile
71.7%
Related for GHSA-VV6J-5X58-Q2C3