CVE-2015-5181

MEDIUM

JBoss A-MQ < 6.0 - Stored Cross-Site Scripting in JBoss Console

Title source: llm
STIX 2.1

Description

The JBoss console in A-MQ allows remote attackers to execute arbitrary JavaScript.

References (3)

Core 3
Core References
Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1248804
Broken Link vendor-advisory x_refsource_redhat
https://rhn.redhat.com/errata/RHSA-2015-2557.html
Broken Link vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2015-2556.html

Scores

CVSS v3 5.4
EPSS 0.0076
EPSS Percentile 51.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
redhat/jboss_a-mq < 6.0
Published Sep 25, 2017
Tracked Since Feb 18, 2026