CVE-2014-3649

JBoss AeroGear has reflected XSS via the password field

Score

CVSS 3.1 6.1 Medium

Status

Modified - secalert@redhat.com

Published

2019-11-04

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Aerogear (Jboss)
• Jboss Aerogear (Redhat)

References

• https://access.redhat.com/security/cve/cve-2014-3649
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3649