CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-4575

Cross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.013

EPSS Ranking 78.4%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2011-4575

Redhat » Jboss Enterprise Application Platform » Version: 5.2.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:5.2.0
Redhat » Jboss Enterprise Brms Platform » Version: 5.0.0

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.0.0
Redhat » Jboss Enterprise Brms Platform » Version: 5.0.1

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.0.1
Redhat » Jboss Enterprise Brms Platform » Version: 5.0.2

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.0.2
Redhat » Jboss Enterprise Brms Platform » Version: 5.1.0

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.1.0
Redhat » Jboss Enterprise Brms Platform » Version: 5.2.0

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.2.0
Redhat » Jboss Enterprise Brms Platform » Version: 5.3.0

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.3.0
Redhat » Jboss Enterprise Web Platform » Version: 5.2.0

cpe:2.3:a:redhat:jboss_enterprise_web_platform:5.2.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-4575

Products

Pricing

Contact Us