Red Hat Security Advisory

RHSA-2015:1525

Red Hat JBoss Operations Network 3.3.3 update

Released 2015-07-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Operations Network 3.3

Fixes 1 record

TI-2015-02888 CVE-2015-3267 · GHSA-5j8q-m7q7-vgqf

Cross-site scripting (XSS) vulnerability in the 404 error page in Red Hat JBoss…

LOW 22

Cross-site scripting (XSS) vulnerability in the 404 error page in Red Hat JBoss Operations Network before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0121 Published 2015-08-11 Partial fix CWE-79