Published: 27/07/2018 Updated: 09/10/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

JBoss BRMS 6 and BPM Suite 6 prior to 6.4.3 are vulnerable to a reflected XSS via artifact upload. A malformed XML file, if uploaded, causes an error message to appear that includes part of the bad XML code verbatim without filtering out scripts. Successful exploitation would allow execution of script code within the context of the affected user.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat jboss bpm suite

JBoss BRMS 6 and BPM Suite 6 are vulnerable to a reflected XSS via artifact upload A malformed XML file, if uploaded, causes an error message to appear that includes part of the bad XML code verbatim without filtering out scripts Successful exploitation would allow execution of script code within the context of the affected user ...

CWE-79 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7463 https://access.redhat.com/errata/RHSA-2017:1218 https://access.redhat.com/errata/RHSA-2017:1217 http://www.securityfocus.com/bid/98385 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2017-7463

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-7463

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect