{"id":"CVE-2018-10934","state":"PUBLISHED","title":"A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the applicatio","description":"A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users.","publishedAt":"2019-03-27T12:20:07.000Z","updatedAt":"2024-08-05T07:54:36.087Z","severity":{"score":5.4,"label":"Medium","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","source":"redhat"},"assigner":"redhat","products":["Red Hat wildfly-core"],"affected":[{"vendor":"Red Hat","product":"wildfly-core","versions":[{"version":"7.1.6.CR1","status":"affected"},{"version":"7.1.6.GA","status":"affected"}]}],"references":["https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10934","https://access.redhat.com/errata/RHSA-2019:1160","https://access.redhat.com/errata/RHSA-2019:1162","https://access.redhat.com/errata/RHSA-2019:1159","https://access.redhat.com/errata/RHSA-2019:1161","https://security.netapp.com/advisory/ntap-20190611-0002/"],"weaknesses":["CWE-79"],"ingestedAt":"2026-10-29T19:44:10.244Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/10xxx/CVE-2018-10934.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-10934","state":"PUBLISHED","datePublished":"2019-03-27T12:20:07.000Z","dateUpdated":"2024-08-05T07:54:36.087Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2018-05-09T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users."}],"affected":[{"vendor":"Red Hat","product":"wildfly-core","versions":[{"version":"7.1.6.CR1","status":"affected"},{"version":"7.1.6.GA","status":"affected"}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10934","tags":["x_refsource_CONFIRM"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1160","name":"RHSA-2019:1160","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1162","name":"RHSA-2019:1162","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1159","name":"RHSA-2019:1159","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1161","name":"RHSA-2019:1161","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://security.netapp.com/advisory/ntap-20190611-0002/","tags":["x_refsource_CONFIRM"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-79","description":"CWE-79","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","dateUpdated":"2019-06-11T22:06:05.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert@redhat.com","ID":"CVE-2018-10934","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"wildfly-core","version":{"version_data":[{"version_value":"7.1.6.CR1"},{"version_value":"7.1.6.GA"}]}}]},"vendor_name":"Red Hat"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users."}]},"impact":{"cvss":[[{"vectorString":"5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.0"}]]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-79"}]}]},"references":{"reference_data":[{"name":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10934","refsource":"CONFIRM","url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10934"},{"name":"RHSA-2019:1160","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2019:1160"},{"name":"RHSA-2019:1162","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2019:1162"},{"name":"RHSA-2019:1159","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2019:1159"},{"name":"RHSA-2019:1161","refsource":"REDHAT","url":"https://access.redhat.com/errata/RHSA-2019:1161"},{"name":"https://security.netapp.com/advisory/ntap-20190611-0002/","refsource":"CONFIRM","url":"https://security.netapp.com/advisory/ntap-20190611-0002/"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10934","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1160","name":"RHSA-2019:1160","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1162","name":"RHSA-2019:1162","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1159","name":"RHSA-2019:1159","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://access.redhat.com/errata/RHSA-2019:1161","name":"RHSA-2019:1161","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://security.netapp.com/advisory/ntap-20190611-0002/","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T07:54:36.087Z"}}]}}}