CVE-2013-4372

Multiple cross-site scripting (XSS) vulnerabilities in Fuse Management Console in Red Hat JBoss Fuse 6.0.0 before patch 3 and JBoss A-MQ 6.0.0 before patch 3…

published September 30, 2013

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in Fuse Management Console in Red Hat JBoss Fuse 6.0.0 before patch 3 and JBoss A-MQ 6.0.0 before patch 3 allow remote attackers to inject arbitrary web script or HTML via the (1) user field in the create user page or (2) profile version to the create profile page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02164 · 82.1th percentile
Published
2013-09-30T19:00Z
EPSS history
Timeline
  • 30 SEP 19:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in Fuse Management Console in Red Hat JBoss Fuse 6.0.0 before patch 3 and JBoss A-MQ 6.0.0 before patch 3…
    cvelistv5