CVE-2018-10934
- State
- Published
- Severity
- 5.4 Medium
- Published
- Mar 27, 2019
- Updated
- Aug 5, 2024
- Reserved
- May 9, 2018
Description
A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 5.4 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N | redhat |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
wildfly-coreRed Hat |
|
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10934
- RHSA-2019:1160vendor-advisory
- RHSA-2019:1162vendor-advisory
- RHSA-2019:1159vendor-advisory
- RHSA-2019:1161vendor-advisory
- https://security.netapp.com/advisory/ntap-20190611-0002/
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.