Cross site scripting

2019-11-0415:15:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.3%

JBoss AeroGear has reflected XSS via the password field

CPENameOperatorVersion
jboss_aerogeareq<= 2014919

CPE	Name	Operator	Version
	jboss_aerogear	eq	<= 2014919

References

access.redhat.com/security/cve/cve-2014-3649

bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3649