CVE-2018-10934

5.4 mediumEPSS 0.9%

Medium (5.4) in redhat. EPSS 0.9% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions before 7.1.6.CR1, 7.1.6.GA. Users with roles that can create objects in the application can exploit this to attack other privileged users.

Severity

CVSS 3.0

5.4 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2019-03-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

redhat:jboss_enterprise_application_platform
redhat:single_sign-on

References

https://access.redhat.com/errata/RHSA-2019:1159
https://access.redhat.com/errata/RHSA-2019:1160
https://access.redhat.com/errata/RHSA-2019:1161
https://access.redhat.com/errata/RHSA-2019:1162
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10934

Check your stack JSON