Jboss Aerogear (Redhat) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2022-07-01. Vendor: Redhat.

CVEs of Jboss Aerogear

• CVE-2014-3650 - CVSS 5.4 (medium), 2022-07-01: Multiple persistent cross-site scripting (XSS) flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could use these…
• CVE-2014-3648 - CVSS 7.5 (high), 2022-07-01: The simplepush server iterates through the application installations and pushes a notification to the server provided by deviceToken. But this is user…
• CVE-2014-3649 - CVSS 6.1 (medium), 2019-11-04: JBoss AeroGear has reflected XSS via the password field