Redhat Jboss Aerogear
3 CVEs affecting Redhat Jboss Aerogear. Latest disclosed: 2022-07-01. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-3648 | High | 7.5 | 2022-07-01 | The simplepush server iterates through the application installations and pushes a notification to the server provided by deviceToken. But this is user controll… |
CVE-2014-3649 | Medium | 6.1 | 2019-11-04 | JBoss AeroGear has reflected XSS via the password field |
CVE-2014-3650 | Medium | 5.4 | 2022-07-01 | Multiple persistent cross-site scripting (XSS) flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could use these fl… |