CVE-2016-7033

MEDIUM

Red Hat JBoss BPM Suite 6.3.2 - Cross-Site Scripting in Admin Pages

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in the admin pages in dashbuilder in Red Hat JBoss BPM Suite 6.3.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/92762

Issue Tracking x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=1373344

Vendor Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2017-0249.html

Scores

CVSS v3 6.1

EPSS 0.0154

EPSS Percentile 72.2%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (1)

redhat/jboss_bpm_suite 6.3.2

Published Sep 07, 2016

Tracked Since Feb 18, 2026