CVE-2017-16012 - Vulnerability Details - OpenCVE

Description

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9251. Reason: This candidate is a duplicate of CVE-2015-9251. Notes: All CVE users should reference CVE-2015-9251 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Published: 2018-06-04

Score: 6.8 Medium

EPSS: n/a

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

No data.

Package	CPE	Advisory	Released Date
Red Hat Fuse 7.6.0
jquery	cpe:/a:redhat:jboss_fuse:7	RHSA-2020:0983	2020-03-26T00:00:00Z
Red Hat Single Sign-On 7.2.1 zip
	cpe:/a:redhat:jboss_single_sign_on:7.2	RHSA-2018:0501	2018-03-13T00:00:00Z

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://nvd.nist.gov/vuln/detail/CVE-2017-16012
https://www.cve.org/CVERecord?id=CVE-2017-16012

History

No history.

Subscriptions

Redhat Jboss Fuse Jboss Single Sign On

MITRE

Status: REJECTED

Assigner: hackerone

Published: 2018-06-04T19:00:00.000Z

Updated: 2018-06-26T16:57:01.000Z

Reserved: 2017-10-29T00:00:00.000Z

Link: CVE-2017-16012

Vulnrichment

No data.

NVD

Status : Rejected

Published: 2018-06-04T19:29:00.833

Modified: 2023-11-07T02:40:26.887

Link: CVE-2017-16012

Redhat

Severity : Moderate

Publid Date: 2017-03-21T00:00:00Z

Links: CVE-2017-16012 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"affected_release": [{"advisory": "RHSA-2020:0983", "cpe": "cpe:/a:redhat:jboss_fuse:7", "package": "jquery", "product_name": "Red Hat Fuse 7.6.0", "release_date": "2020-03-26T00:00:00Z"}, {"advisory": "RHSA-2018:0501", "cpe": "cpe:/a:redhat:jboss_single_sign_on:7.2", "product_name": "Red Hat Single Sign-On 7.2.1 zip", "release_date": "2018-03-13T00:00:00Z"}], "bugzilla": {"description": "js-jquery: XSS in responses from cross-origin ajax requests", "id": "1591854", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1591854"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.8", "cvss3_scoring_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N", "status": "verified"}, "cwe": "CWE-79", "details": ["[REJECTED CVE] This CVE has been rejected. This candidate is a duplicate of CVE-2015-9251. Note: All CVE users should reference CVE-2015-9251 instead of this candidate."], "name": "CVE-2017-16012", "package_state": [{"cpe": "cpe:/a:redhat:cloudforms_managementengine:5", "fix_state": "Will not fix", "impact": "low", "package_name": "cfme-gemset", "product_name": "CloudForms Management Engine 5"}, {"cpe": "cpe:/a:redhat:openstack:7", "fix_state": "Will not fix", "package_name": "python-XStatic-jQuery", "product_name": "Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7", "fix_state": "Not affected", "package_name": "console", "product_name": "Red Hat JBoss Enterprise Application Platform 7"}, {"cpe": "cpe:/a:redhat:jboss_operations_network:3", "fix_state": "Affected", "package_name": "cassandra", "product_name": "Red Hat JBoss Operations Network 3"}, {"cpe": "cpe:/a:redhat:openstack:10", "fix_state": "Will not fix", "package_name": "python-XStatic-jQuery", "product_name": "Red Hat OpenStack Platform 10 (Newton)"}, {"cpe": "cpe:/a:redhat:openstack:12", "fix_state": "Will not fix", "package_name": "python-XStatic-jQuery", "product_name": "Red Hat OpenStack Platform 12 (Pike)"}, {"cpe": "cpe:/a:redhat:openstack:13", "fix_state": "Will not fix", "package_name": "python-XStatic-jQuery", "product_name": "Red Hat OpenStack Platform 13 (Queens)"}, {"cpe": "cpe:/a:redhat:openstack:8", "fix_state": "Will not fix", "package_name": "python-XStatic-jQuery", "product_name": "Red Hat OpenStack Platform 8 (Liberty)"}, {"cpe": "cpe:/a:redhat:openstack:9", "fix_state": "Will not fix", "package_name": "python-XStatic-jQuery", "product_name": "Red Hat OpenStack Platform 9 (Mitaka)"}, {"cpe": "cpe:/a:redhat:network_satellite:5", "fix_state": "Out of support scope", "impact": "low", "package_name": "patternfly1", "product_name": "Red Hat Satellite 5"}, {"cpe": "cpe:/a:redhat:red_hat_single_sign_on:7", "fix_state": "Affected", "package_name": "keycloak", "product_name": "Red Hat Single Sign-On 7"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:3", "fix_state": "Will not fix", "package_name": "rh-ror42-rubygem-jquery-rails", "product_name": "Red Hat Software Collections"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:3", "fix_state": "Will not fix", "package_name": "rh-ror50-rubygem-jquery-rails", "product_name": "Red Hat Software Collections"}], "public_date": "2017-03-21T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2017-16012\nhttps://nvd.nist.gov/vuln/detail/CVE-2017-16012"], "threat_severity": "Moderate"}