PT-2016-7187 · Red Hat · Red Hat Jboss Bpm Suite

Jeremy Choi · Publicado 2016-09-07 · Atualizado 2018-01-05 · CVE-2016-7033

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Red Hat JBoss BPM Suite version 6.3.2

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the admin pages of dashbuilder. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Recommendations For Red Hat JBoss BPM Suite version 6.3.2, update to a version that includes the fix for the XSS vulnerabilities in the admin pages of dashbuilder.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-7033

Produtos afetados

Red Hat Jboss Bpm Suite

Referências · 5

• https://bugzilla.redhat.com/show_bug.cgi?id=1373344 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-7033 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-7033 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2017-0249.html · Aviso do Fabricante
• http://securityfocus.com/bid/92762 · Nota