Description (CNA)
A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 35.0.0 before 35.0.0 |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7 | unaffected |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | unaffected 0:2.16.0-21.redhat_00055.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | unaffected 0:3.5.10-1.redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | unaffected 1:1.0.2-5.redhat_00004.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | unaffected 0:1.9.6-1.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | unaffected 0:2.3.14-9.SP10_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | unaffected 0:3.3.27-1.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | unaffected 0:6.0.23-3.SP2_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | unaffected 0:1.5.21-1.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | unaffected 0:1.10.0-42.Final_redhat_00042.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | unaffected 0:5.4.15-1.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | unaffected 0:7.4.23-3.GA_redhat_00002.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | unaffected 0:1.15.26-1.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | unaffected 0:2.16.0-21.redhat_00055.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | unaffected 0:3.5.10-1.redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | unaffected 1:1.0.2-5.redhat_00004.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | unaffected 0:1.9.6-1.Final_redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | unaffected 0:2.3.14-9.SP10_redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | unaffected 0:3.3.27-1.Final_redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | unaffected 0:6.0.23-3.SP2_redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | unaffected 0:1.5.21-1.Final_redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | unaffected 0:1.10.0-42.Final_redhat_00042.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | unaffected 0:5.4.15-1.Final_redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | unaffected 0:7.4.23-3.GA_redhat_00002.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | unaffected 0:1.15.26-1.Final_redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | unaffected 0:2.16.0-21.redhat_00055.1.el7eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | unaffected 0:3.5.10-1.redhat_00001.1.el7eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | unaffected 1:1.0.2-5.redhat_00004.1.el7eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | unaffected 0:1.9.6-1.Final_redhat_00001.1.el7eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | unaffected 0:2.3.14-9.SP10_redhat_00001.1.el7eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | unaffected 0:3.3.27-1.Final_redhat_00001.1.el7eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | unaffected 0:6.0.23-3.SP2_redhat_00001.1.el7eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | unaffected 0:1.5.21-1.Final_redhat_00001.1.el7eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | unaffected 0:1.10.0-42.Final_redhat_00042.1.el7eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | unaffected 0:5.4.15-1.Final_redhat_00001.1.el7eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | unaffected 0:7.4.23-3.GA_redhat_00002.1.el7eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | unaffected 0:1.15.26-1.Final_redhat_00001.1.el7eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8 | unaffected |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:2.0.3-1.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:8.6.6-5.redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:800.6.0-2.GA_redhat_00002.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:1.0.13-2.redhat_5.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:2.1.214-2.redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:3.6.23-1.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:6.0.6-2.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:1.8.0-2.redhat_00002.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:3.0.0-3.redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:2.1.0-3.redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:3.0.0-4.redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:3.0.2-2.redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:4.0.1-2.redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:3.0.0-2.redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:3.1.0-3.redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:1.1.13-2.redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:2.4.0-2.redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:2.0.1-2.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:1.6.1-2.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:2.3.0-2.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:4.0.1-2.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:3.0.0-3.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:2.0.1-2.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:2.0.0-2.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:2.1.19-2.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:1.5.1-2.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:3.0.4-2.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:1.1.0-2.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:2.4.0-3.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:8.0.0-3.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:3.3.0-2.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:3.0.0-2.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:5.1.0-1.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:7.3.1-1.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:5.0.0-2.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:1.0.0-2.redhat_8.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:1.9.0-2.redhat_00002.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:1.0.1-2.Final_redhat_3.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:2.2.21-2.redhat_00001.2.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:2.0.1-2.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:1.4.0-2.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:8.0.6-5.GA_redhat_00004.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:1.6.0-4.Final_redhat_00001.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:6.4.0-3.redhat_00003.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 | unaffected 0:1.2.0-3.redhat_12.1.el8eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | unaffected 0:2.0.3-1.Final_redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | unaffected 0:8.6.6-5.redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | unaffected 0:800.6.0-2.GA_redhat_00002.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | unaffected 0:1.0.13-2.redhat_5.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | unaffected 0:2.1.214-2.redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | unaffected 0:3.6.23-1.Final_redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | unaffected 0:6.0.6-2.Final_redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | unaffected 0:1.8.0-2.redhat_00002.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | unaffected 0:3.0.0-3.redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | unaffected 0:2.1.0-3.redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | unaffected 0:3.0.0-4.redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | unaffected 0:3.0.2-2.redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | unaffected 0:4.0.1-2.redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | unaffected 0:3.0.0-2.redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | unaffected 0:3.1.0-3.redhat_00001.1.el9eap before * |
| Red Hat / Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 | unaffected 0:1.1.13-2.redhat_00001.1.el9eap before * |
CWE
CWE-79
References
- https://access.redhat.com/errata/RHSA-2025:10924
- https://access.redhat.com/errata/RHSA-2025:10925
- https://access.redhat.com/errata/RHSA-2025:10926
- https://access.redhat.com/errata/RHSA-2025:10931
- https://access.redhat.com/errata/RHSA-2025:11636
- https://access.redhat.com/errata/RHSA-2025:11638
- https://access.redhat.com/errata/RHSA-2025:11639
- https://access.redhat.com/errata/RHSA-2025:11640
- https://access.redhat.com/errata/RHSA-2025:11645
- https://access.redhat.com/errata/RHSA-2025:2025
- https://access.redhat.com/errata/RHSA-2025:2026
- https://access.redhat.com/errata/RHSA-2025:2029
- https://access.redhat.com/security/cve/CVE-2024-10234
- https://bugzilla.redhat.com/show_bug.cgi?id=2320848
ADP enrichment
No English description supplied.
No references supplied.