Naftali Rosenbaum

**Name of the Vulnerable Software and Affected Versions** A-MQ (affected versions not specified) **Description** The issue allows remote attackers to execute arbitrary JavaScript in the JBoss console. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** A-MQ (affected versions not specified) **Description** The issue is related to a cross-site request forgery (CSRF) vulnerability in the jolokia API. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Red Hat AMQ (affected versions not specified) **Description** The issue is related to the absence of HTTPOnly and Secure attributes on cookies in the console of Red Hat AMQ. This could allow a remote attacker to reuse the session identifier of an authenticated user. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.