CVE-2009-1380: XSS
Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 allows remote attackers to inject arbitrary web script or HTML via the filter parameter, related to the key property and the position of quote and colon characters.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1380?
CVE-2009-1380 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2009-1380?
To fix CVE-2009-1380, upgrade to JBoss Enterprise Application Platform versions 4.2.0.CP08 or 4.3.0.CP07 and later.
Which versions of JBoss are affected by CVE-2009-1380?
CVE-2009-1380 affects Red Hat JBoss Enterprise Application Platform versions prior to 4.2.0.CP08 and 4.3.0.CP07.
What type of vulnerability is CVE-2009-1380?
CVE-2009-1380 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts or HTML.
Can CVE-2009-1380 be exploited remotely?
Yes, CVE-2009-1380 can be exploited remotely by attackers through malicious web scripts injected via the filter parameter.