What is CVE-2017-2674?

CVE-2017-2674 is a medium-severity vulnerability in Red Hat Business-central, classified under Improper Input Validation. CVSS score: 6.1/10. Published 2018-07-27.

How severe is CVE-2017-2674?

Medium severity. CVSS v3 base score is 6.1 out of 10.

XSS in Red Hat Business-central

CVE-2017-2674

JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in Business Central. The flaw is due to lack of sanitation of user input when creating new lists. Remote, authenticated attackers that have privileg…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.013 (67.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Red Hat Business-central — versions 6.4.3
Redhat Jboss_bpm_suite

Weakness classification (CWE)

References

secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Broken Link, Vendor Advisory)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Broken Link, Vendor Advisory)
secalert@redhat.com (x_refsource_CONFIRM, Issue Tracking, Vendor Advisory)
secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2017-2674?: CVE-2017-2674 is a medium-severity vulnerability in Red Hat Business-central, classified under Improper Input Validation. CVSS score: 6.1/10. Published 2018-07-27.
How severe is CVE-2017-2674?: Medium severity. CVSS v3 base score is 6.1 out of 10.