CVE-2016-0712

CVE-2016-0712

Published · Updated

Follow this CVE+ Monitor org.apache.portals.jetspeed-2:jetspeed

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.2%
Cross-site scripting (XSS) vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to portal.
Affected products
n/a · n/a