Cross-site Scripting (XSS)

2020-04-1000:37:33

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

71.2%

JSON

jboss is vulnerable to cross-site scripting (XSS). The vulnerability exists as an attacker could use these flaws to present misleading data to an authenticated user, or execute arbitrary scripting code in the context of the authenticated user’s browser session.

CPENameOperatorVersion
jboss-seameq1.2.0__1.AP.ep1.19.el5
jboss-seameq1.2.1__1.ep1.2.el5
jboss-seameq1.2.1__1.ep1.3.el5
jboss-seameq1.2.1__1.ep1.3.el4
glassfish-jsfeq1.2_10__0jpp.ep1.5.ep5.el5
glassfish-jsfeq1.2_10__0jpp.ep1.5.ep5.el4
glassfish-jsfeq1.2_04__1.p02.0jpp.ep1.18.el5
hibernate3eq3.2.4__1.SP1_CP02.0jpp.ep1.1.el5.1
hibernate3eq3.2.4__1.SP1_CP01.0jpp.ep1.1.el5.1
hibernate3eq3.2.4__1.SP1_CP02.0jpp.ep1.1.el4

Name	Operator	Version
jboss-seam	eq	1.2.0__1.AP.ep1.19.el5
jboss-seam	eq	1.2.1__1.ep1.2.el5
jboss-seam	eq	1.2.1__1.ep1.3.el5
jboss-seam	eq	1.2.1__1.ep1.3.el4
glassfish-jsf	eq	1.2_10__0jpp.ep1.5.ep5.el5
glassfish-jsf	eq	1.2_10__0jpp.ep1.5.ep5.el4
glassfish-jsf	eq	1.2_04__1.p02.0jpp.ep1.18.el5
hibernate3	eq	3.2.4__1.SP1_CP02.0jpp.ep1.1.el5.1
hibernate3	eq	3.2.4__1.SP1_CP01.0jpp.ep1.1.el5.1
hibernate3	eq	3.2.4__1.SP1_CP02.0jpp.ep1.1.el4