OpenCVE

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9251. Reason: This candidate is a duplicate of CVE-2015-9251. Notes: All CVE users should reference CVE-2015-9251 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Changed

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Redhat	Jboss Fuse Jboss Single Sign On

No data.

Package	CPE	Advisory	Released Date
Red Hat Fuse 7.6.0
jquery	cpe:/a:redhat:jboss_fuse:7	RHSA-2020:0983	2020-03-26T00:00:00Z
Red Hat Single Sign-On 7.2.1 zip
	cpe:/a:redhat:jboss_single_sign_on:7.2	RHSA-2018:0501	2018-03-13T00:00:00Z

References

Link	Providers
https://nvd.nist.gov/vuln/detail/CVE-2017-16012
https://www.cve.org/CVERecord?id=CVE-2017-16012

History

No history.

MITRE

Status: REJECTED

Assigner: hackerone

Published: 2018-06-04T19:00:00

Updated: 2018-06-26T16:57:01

Reserved: 2017-10-29T00:00:00

Link: CVE-2017-16012

Vulnrichment

No data.

NVD

Status : Rejected

Published: 2018-06-04T19:29:00.833

Modified: 2023-11-07T02:40:26.887

Link: CVE-2017-16012

Redhat

Severity : Moderate

Publid Date: 2017-03-21T00:00:00Z

Links: CVE-2017-16012 - Bugzilla

{"affected_release": [{"advisory": "RHSA-2020:0983", "cpe": "cpe:/a:redhat:jboss_fuse:7", "package": "jquery", "product_name": "Red Hat Fuse 7.6.0", "release_date": "2020-03-26T00:00:00Z"}, {"advisory": "RHSA-2018:0501", "cpe": "cpe:/a:redhat:jboss_single_sign_on:7.2", "product_name": "Red Hat Single Sign-On 7.2.1 zip", "release_date": "2018-03-13T00:00:00Z"}], "bugzilla": {"description": "js-jquery: XSS in responses from cross-origin ajax requests", "id": "1591854", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1591854"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.8", "cvss3_scoring_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N", "status": "verified"}, "cwe": "CWE-79", "details": ["No description is available for this CVE."], "name": "CVE-2017-16012", "package_state": [{"cpe": "cpe:/a:redhat:cloudforms_managementengine:5", "fix_state": "Will not fix", "impact": "low", "package_name": "cfme-gemset", "product_name": "CloudForms Management Engine 5"}, {"cpe": "cpe:/a:redhat:openstack:7", "fix_state": "Will not fix", "package_name": "python-XStatic-jQuery", "product_name": "Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)"}, {"cpe": "cpe:/a:redhat:jboss_enterprise_application_platform:7", "fix_state": "Not affected", "package_name": "console", "product_name": "Red Hat JBoss Enterprise Application Platform 7"}, {"cpe": "cpe:/a:redhat:jboss_operations_network:3", "fix_state": "Affected", "package_name": "cassandra", "product_name": "Red Hat JBoss Operations Network 3"}, {"cpe": "cpe:/a:redhat:openstack:10", "fix_state": "Will not fix", "package_name": "python-XStatic-jQuery", "product_name": "Red Hat OpenStack Platform 10 (Newton)"}, {"cpe": "cpe:/a:redhat:openstack:12", "fix_state": "Will not fix", "package_name": "python-XStatic-jQuery", "product_name": "Red Hat OpenStack Platform 12 (Pike)"}, {"cpe": "cpe:/a:redhat:openstack:13", "fix_state": "Will not fix", "package_name": "python-XStatic-jQuery", "product_name": "Red Hat OpenStack Platform 13 (Queens)"}, {"cpe": "cpe:/a:redhat:openstack:8", "fix_state": "Will not fix", "package_name": "python-XStatic-jQuery", "product_name": "Red Hat OpenStack Platform 8 (Liberty)"}, {"cpe": "cpe:/a:redhat:openstack:9", "fix_state": "Will not fix", "package_name": "python-XStatic-jQuery", "product_name": "Red Hat OpenStack Platform 9 (Mitaka)"}, {"cpe": "cpe:/a:redhat:network_satellite:5", "fix_state": "Out of support scope", "impact": "low", "package_name": "patternfly1", "product_name": "Red Hat Satellite 5"}, {"cpe": "cpe:/a:redhat:red_hat_single_sign_on:7", "fix_state": "Affected", "package_name": "keycloak", "product_name": "Red Hat Single Sign-On 7"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:3", "fix_state": "Will not fix", "package_name": "rh-ror42-rubygem-jquery-rails", "product_name": "Red Hat Software Collections"}, {"cpe": "cpe:/a:redhat:rhel_software_collections:3", "fix_state": "Will not fix", "package_name": "rh-ror50-rubygem-jquery-rails", "product_name": "Red Hat Software Collections"}], "public_date": "2017-03-21T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2017-16012\nhttps://nvd.nist.gov/vuln/detail/CVE-2017-16012"], "threat_severity": "Moderate", "upstream_fix": "js-jquery 3.0.0"}