Skip to content
Sign in
5.4 Medium

CVE-2018-10934 A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA

Description

A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users.

Affected products and versions

Product Affected versions Fixed in
wildfly-core 7.1 7.1.6.GA → 7.1.6.CR1 No fix stated

Other CVEs of wildfly-core

The 3 CVEs of wildfly-core →
CVE-2020-25689 A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect… 5.3 Medium CVE-2019-14838 A flaw was found in wildfly-core before 7.2.5.GA 5.2 Medium
Track this CVE