Vulnerabilities (CVE)

Filtered by vendor Redhat Subscribe
Filtered by product Jboss Aerogear
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-3650 1 Redhat 1 Jboss Aerogear 2022-07-11 3.5 LOW 5.4 MEDIUM
Multiple persistent cross-site scripting (XSS) flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could use these flaws to compromise the application with specially crafted input.
CVE-2014-3649 1 Redhat 1 Jboss Aerogear 2019-11-06 4.3 MEDIUM 6.1 MEDIUM
JBoss AeroGear has reflected XSS via the password field