Skip to content
OpenAdvisories

Vendor

JavaMelody

1 known vulnerabilities.

Products

JavaMelody 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2016-20102

    JavaMelody < 1.60.0 Reflected XSS via monitoring graph parameter

    JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph parameter of /monitoring?part=graph. Attackers can include a closing script tag in…

    JavaMelody JavaMelody