CVE-2018-10934
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.4epss 0.9%
probabilidade de exploração
0.9%top 40% das CVEs
exploração observada
nãonenhuma fonte reporta
A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users.
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
Red Hat · wildfly-coreReferências
https://access.redhat.com/errata/RHSA-2019:1159https://access.redhat.com/errata/RHSA-2019:1160https://access.redhat.com/errata/RHSA-2019:1161https://access.redhat.com/errata/RHSA-2019:1162https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10934https://security.netapp.com/advisory/ntap-20190611-0002/