Unscored CVE-2011-3206 EUVD-2011-3170GHSA-3j98-rrxh-qmw6

Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in RHQ 4.2.0, as used in JBoss Operations Network (aka …

Published Jan 8, 2012 · Updated Aug 6, 2024 · Assigned by redhat

Description

Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in RHQ 4.2.0, as used in JBoss Operations Network (aka JON or JBoss ON) before 3.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

47197 third-party-advisory
47280 third-party-advisory
RHSA-2012:0089 vendor-advisory
1026435 vdb-entry
https://bugzilla.redhat.com/show_bug.cgi?id=734662