CVE-2013-4372

Multiple cross-site scripting (XSS) vulnerabilities in Fuse Management Console in Red Hat JBoss Fuse 6.0.0 before patch 3 and JBoss A-MQ 6.0.0 before patch 3 allow remote attackers to inject arbitrary web script or HTML via the (1) user field in the create user page or (2) profile version to the create profile page.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:jboss_a-mq:6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_fuse:6.0.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2013-09-30 21:55

Updated : 2024-02-28 12:00


NVD link : CVE-2013-4372

Mitre link : CVE-2013-4372

CVE.ORG link : CVE-2013-4372


JSON object : View

Products Affected

redhat

  • jboss_a-mq
  • jboss_fuse
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')