CVE-2014-0149
published 2014-05-05CVE-2014-0149: Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to inject arbitrary web script or HTML via…
PriorityP416medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
0.99%
58.7th percentile
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter or (2) id name.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | jboss_web_framework_kit | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-mp35-7mg4-6p8r: Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2
ghsa_unreviewed·2022-05-17
CVE-2014-0149 [MEDIUM] CWE-79 GHSA-mp35-7mg4-6p8r: Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter or (2) id name.
Red Hat
Seam: XSS flaw in remoting
vendor_redhat·2014-05-01·CVSS 4.3
CVE-2014-0149 [MEDIUM] CWE-79 Seam: XSS flaw in remoting
Seam: XSS flaw in remoting
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter or (2) id name.
Statement: Red Hat JBoss Enterprise Application Platform 4 and 5; Red Hat JBoss Enterprise Portal Platform 5; and Red Hat JBoss Enterprise SOA Platform 4 and 5 are now in Phase 3, Extended Life Support, of their respective life cycles. This issue has been rated as having Moderate security impact and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat JBoss Middleware and Red Hat JBoss Operations Network Product Update and Support Policy: https://access.redhat.com/support/policy/updates/jboss_notes/
Package: seam-remo
No detection rules found.
No public exploits indexed.
2014-05-05
Published