CVE

Id
65802  
CVE No.
CVE-2013-5855  
Status
Candidate  
Description
Oracle Mojarra 2.2.x before 2.2.6 and 2.1.x before 2.1.28 does not perform appropriate encoding when a (1) <h:outputText> tag or (2) EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors.  
Phase
Assigned (20130918)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
642062 65802 CVE-2013-5855 BUGTRAQ:20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
642063 65802 CVE-2013-5855 URL:http://www.securityfocus.com/archive/1/archive/1/534161/100/0/threaded  View
642064 65802 CVE-2013-5855 FULLDISC:20141205 NEW: VMSA-2014-0012 - VMware vSphere product updates address security vulnerabilities  View
642065 65802 CVE-2013-5855 URL:http://seclists.org/fulldisclosure/2014/Dec/23  View
642066 65802 CVE-2013-5855 MISC:http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/JSF-outputText-tag-the-good-the-bad-and-the-ugly/ba-p/6368011#.U8ccVPlXZHU  View
642067 65802 CVE-2013-5855 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html  View
642068 65802 CVE-2013-5855 CONFIRM:https://java.net/jira/browse/JAVASERVERFACES-3150  View
642069 65802 CVE-2013-5855 CONFIRM:https://java.net/jira/browse/JAVASERVERFACES_SPEC_PUBLIC-1258  View
642070 65802 CVE-2013-5855 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2014-0012.html  View
642071 65802 CVE-2013-5855 CONFIRM:http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
642072 65802 CVE-2013-5855 REDHAT:RHSA-2015:0675  View
642073 65802 CVE-2013-5855 URL:http://rhn.redhat.com/errata/RHSA-2015-0675.html  View
642074 65802 CVE-2013-5855 REDHAT:RHSA-2015:0720  View
642075 65802 CVE-2013-5855 URL:http://rhn.redhat.com/errata/RHSA-2015-0720.html  View
642076 65802 CVE-2013-5855 REDHAT:RHSA-2015:0765  View
642077 65802 CVE-2013-5855 URL:http://rhn.redhat.com/errata/RHSA-2015-0765.html  View
642078 65802 CVE-2013-5855 BID:65600  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
12264 JVNDB-2014-001139 Oracle MySQL の MySQL Server における GIS に関する脆弱性 Oracle MySQL の MySQL Server には、GIS に関する処理に不備があるため、可用性に影響のある脆弱性が存在します。 CVE-2013-5860 65802 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001139.html  View