NVD

Id
23293  
Name
CVE-2015-0862  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) message details when a message is unqueued, such as headers or arguments; (2) policy names, which are not properly handled when viewing policies; (3) details for AMQP network clients, such as the version; allow remote authenticated administrators to inject arbitrary web script or HTML via (4) user names, (5) the cluster name; or allow RabbitMQ cluster administrators to (6) modify unspecified content.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-01-18  
Modified Date
2015-01-20  
Seq
2015-0862  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
123709 23293 CVE-2015-0862 http://www.rabbitmq.com/news.html#2015-01-08T10:14:05+0100  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5877 JVNDB-2015-001197 RabbitMQ 管理プラグインの管理 Web UI におけるクロスサイトスクリプティングの脆弱性 RabbitMQ 管理プラグインの管理 Web UI には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-0862 78073 CVE-2015-0862 23293 3.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001197.html 2015-01-08 2015-01-23 View