CVE-2013-4424
published 2013-12-23CVE-2013-4424: Multiple cross-site scripting (XSS) vulnerabilities in the GateIn Portal component in Red Hat JBoss Portal 6.1.0 allow remote attackers to inject arbitrary web…
PriorityP416medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
0.98%
58.4th percentile
Multiple cross-site scripting (XSS) vulnerabilities in the GateIn Portal component in Red Hat JBoss Portal 6.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | jboss_enterprise_portal_platform | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
GateIn: XSS due to improper url escaping
vendor_redhat·2013-12-16·CVSS 4.3
CVE-2013-4424 [MEDIUM] CWE-79 GateIn: XSS due to improper url escaping
GateIn: XSS due to improper url escaping
Multiple cross-site scripting (XSS) vulnerabilities in the GateIn Portal component in Red Hat JBoss Portal 6.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Package: Portal (Red Hat JBoss Portal 5) - Will not fix
GHSA
GHSA-38jw-6m6v-pmqm: Multiple cross-site scripting (XSS) vulnerabilities in the GateIn Portal component in Red Hat JBoss Portal 6
ghsa_unreviewed·2022-05-17
CVE-2013-4424 [MEDIUM] CWE-79 GHSA-38jw-6m6v-pmqm: Multiple cross-site scripting (XSS) vulnerabilities in the GateIn Portal component in Red Hat JBoss Portal 6
Multiple cross-site scripting (XSS) vulnerabilities in the GateIn Portal component in Red Hat JBoss Portal 6.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
No detection rules found.
No public exploits indexed.
2013-12-23
Published