PT-2019-6998 · Red Hat · Jbossweb

David Jorm · Published 2019-12-11 · Updated 2019-12-13 · CVE-2013-6495

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions JBossWeb (affected versions not specified)

Description The issue is related to reflected XSS in JBossWeb Bayeux.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-6495

RHSA-2013:1207

RHSA-2013:1208

Affected Products

Jbossweb

References · 4

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-6495 · Vendor Advisory
• https://access.redhat.com/security/cve/cve-2013-6495 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-6495 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6495 · Note