What’s Vulnerable › Vulnerabilities

CVE-2018-10934

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-03-27 · updated 2026-06-17
• Weakness: CWE-79

Description

A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users.

Affected products

• Red Hat JBoss EAP: 7.0, 7.1.0
• Red Hat Single Sign-On: 7.2

References

• https://access.redhat.com/errata/RHSA-2019:1159
• https://access.redhat.com/errata/RHSA-2019:1160
• https://access.redhat.com/errata/RHSA-2019:1161
• https://access.redhat.com/errata/RHSA-2019:1162
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10934
• https://security.netapp.com/advisory/ntap-20190611-0002/
• https://access.redhat.com/errata/RHSA-2019:1159
• https://access.redhat.com/errata/RHSA-2019:1160
• https://access.redhat.com/errata/RHSA-2019:1161
• https://access.redhat.com/errata/RHSA-2019:1162
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10934
• https://security.netapp.com/advisory/ntap-20190611-0002/

Get alerted when CVE-2018-10934 or the next vulnerability affects your stack