CVE-2010-3857 — Cross-site Scripting in Redhat Jboss Business Rules Management System

CWE-79 — Cross-site Scripting5 documents5 sources
Severity
6.1MEDIUMNVD
EPSS
0.4%
top 38.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Redhat Jboss Business Rules Management SystemJboss Brms
Timeline
PublishedNov 12
Latest updateApr 21

Description

JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5jboss_brms/jboss_brmsbefore 5.1.0

🔴Vulnerability Details

2
GHSA
GHSA-879q-m837-52hf: JBoss BRMS before 5↗2022-04-21
▶
CVEList
CVE-2010-3857: JBoss BRMS before 5↗2019-11-12
▶

📋Vendor Advisories

1
Red Hat
JBoss BRMS XSS via UUID parameter↗2013-07-30
▶

💬Community

1
Bugzilla
CVE-2010-3857 JBoss BRMS XSS via UUID parameter↗2010-10-22
▶
CVE-2010-3857 — Cross-site Scripting in Redhat | cvebase