Published: 14/03/2018 Updated: 07/03/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 384

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an malicious user to execute malicious javascript in the victim's browser.

Vulnerable Product	Search on Vulmon	Subscribe to Product
jolokia jolokia 1.3.7

Synopsis Important: Fuse 71 security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat FuseRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed s ...

Synopsis Important: Red Hat JBoss Fuse/A-MQ 63 R10 security and bug fix update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat JBoss Fuse 63 and Red Hat JBoss A-MQ 63Red Hat Product Security has rated this update as having a security impact of Important A Common ...

An XSS vulnerability exists in the Jolokia agent version 137 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser ...

Spring Boot Vulnerability (Keep On Updating) 0x01 Spring Boot Actuator Exposed Actuator endpoints allow you to monitor and interact with your Spring application Spring Boot includes a number of built-in endpoints and you can also add your own For example the health endpoint provides basic application health information The following endpoints are available: /autoconfig - D

bash_profile :: Automated reconnaissance wrapper - collecting juicy data & vulnerable testing # Dependencies --> go binaries :: githubcom/missme3f/bin sudomy(bash), comb(go), cf-check(go), CORS-Scanner(go), dalfox(go), dnsprobe(go), ffuf(go), gowitness(go), gron(go), gau(go), gf(go), gospider(go), httpx(go), naabu(go), nuclei(go), meg(go), subjack(go),

Spring Boot Vulnerability (Keep On Updating) 0x01 Spring Boot Actuator Exposed Actuator endpoints allow you to monitor and interact with your Spring application Spring Boot includes a number of built-in endpoints and you can also add your own For example the health endpoint provides basic application health information The following endpoints are available: /autoconfig - D

CWE-79 https://jolokia.org/#Security_fixes_with_1.5.0 https://github.com/rhuss/jolokia/commit/5895d5c137c335e6b473e9dcb9baf748851bbc5f#diff-f19898247eddb55de6400489bff748ad https://access.redhat.com/errata/RHSA-2018:2669 https://access.redhat.com/errata/RHSA-2018:3817 https://access.redhat.com/errata/RHSA-2018:2669 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2018-1000129

CVE-2018-1000129

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect