CVE-2013-6235

EUVD-2022-5012
Multiple cross-site scripting (XSS) vulnerabilities in JAMon (Java Application Monitor) 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listenertype or (2) currentlistener parameter to mondetail.jsp or ArraySQL parameter to (3) mondetail.jsp, (4) jamonadmin.jsp, (5) sql.jsp, or (6) exceptions.jsp.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 59%
Affected Products (NVD)
VendorProductVersion
steve_souzajava_application_monitor
𝑥
≤ 2.7
steve_souzajava_application_monitor
1.0
steve_souzajava_application_monitor
1.01
steve_souzajava_application_monitor
2.0
steve_souzajava_application_monitor
2.1
steve_souzajava_application_monitor
2.2
steve_souzajava_application_monitor
2.3
steve_souzajava_application_monitor
2.4
steve_souzajava_application_monitor
2.5
steve_souzajava_application_monitor
2.6
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libjamon-java
bookworm
2.7-8
fixed
bullseye
2.7-7
fixed
sid
2.7-8
fixed
trixie
2.7-8
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libjamon-java
lucid
ignored
precise
not-affected
quantal
not-affected
saucy
not-affected
Common Weakness Enumeration
References
http://osvdb.org/102570
http://osvdb.org/102571
http://osvdb.org/102572
http://osvdb.org/102573
http://packetstormsecurity.com/files/124933
http://seclists.org/fulldisclosure/2014/Jan/164
http://www.securityfocus.com/archive/1/530877/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/90699
http://osvdb.org/102570
http://osvdb.org/102571
http://osvdb.org/102572
http://osvdb.org/102573
http://packetstormsecurity.com/files/124933
http://seclists.org/fulldisclosure/2014/Jan/164
http://www.securityfocus.com/archive/1/530877/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/90699