XSS in Redhat Jboss_enterprise_portal_platform

CVE-2014-7852

Cross-site scripting (XSS) vulnerability in JBoss RichFaces, as used in JBoss Portal 6.1.1, allows remote attackers to inject arbitrary web script or HTML via crafted URL, which is not properly handled in a CSS file.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (49.9th percentile) — read the EPSS interpretation.

Affected products

Redhat Jboss_enterprise_portal_platform — versions 6.1.1
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

1031363 (vdb-entry, x_refsource_SECTRACK)
RHSA-2014:1973 (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)