Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-zufu-x8dx-xygs
Summary
Duplicate Advisory: HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store
# Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-f7jh-m6wp-jm7f. This link is maintained to preserve external references.

# Original Description

A flaw was found in the JBoss EAP Management Console, where a stored Cross-site scripting vulnerability occurs when an application improperly sanitizes user input before storing it in a data store. When this stored data is later included in web pages without adequate sanitization, malicious scripts can execute in the context of users who view these pages, leading to potential data theft, session hijacking, or other malicious activities.
Aliases
0
alias GHSA-hp88-hfjw-2hg4
Fixed_packages
0
url pkg:maven/org.jboss.hal/hal-console@3.7.11.Final
purl pkg:maven/org.jboss.hal/hal-console@3.7.11.Final
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.11.Final
Affected_packages
0
url pkg:maven/org.jboss.hal/hal-console@3.5.0.Final
purl pkg:maven/org.jboss.hal/hal-console@3.5.0.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.0.Final
1
url pkg:maven/org.jboss.hal/hal-console@3.5.1.Final
purl pkg:maven/org.jboss.hal/hal-console@3.5.1.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.1.Final
2
url pkg:maven/org.jboss.hal/hal-console@3.5.2.Final
purl pkg:maven/org.jboss.hal/hal-console@3.5.2.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.2.Final
3
url pkg:maven/org.jboss.hal/hal-console@3.5.3.Final
purl pkg:maven/org.jboss.hal/hal-console@3.5.3.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.3.Final
4
url pkg:maven/org.jboss.hal/hal-console@3.5.4.Final
purl pkg:maven/org.jboss.hal/hal-console@3.5.4.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.4.Final
5
url pkg:maven/org.jboss.hal/hal-console@3.5.5.Final
purl pkg:maven/org.jboss.hal/hal-console@3.5.5.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.5.Final
6
url pkg:maven/org.jboss.hal/hal-console@3.5.6.Final
purl pkg:maven/org.jboss.hal/hal-console@3.5.6.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.6.Final
7
url pkg:maven/org.jboss.hal/hal-console@3.5.7.Final
purl pkg:maven/org.jboss.hal/hal-console@3.5.7.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.7.Final
8
url pkg:maven/org.jboss.hal/hal-console@3.5.8.Final
purl pkg:maven/org.jboss.hal/hal-console@3.5.8.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.8.Final
9
url pkg:maven/org.jboss.hal/hal-console@3.5.9.Final
purl pkg:maven/org.jboss.hal/hal-console@3.5.9.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.9.Final
10
url pkg:maven/org.jboss.hal/hal-console@3.5.10.Final
purl pkg:maven/org.jboss.hal/hal-console@3.5.10.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.10.Final
11
url pkg:maven/org.jboss.hal/hal-console@3.5.11.Final
purl pkg:maven/org.jboss.hal/hal-console@3.5.11.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.11.Final
12
url pkg:maven/org.jboss.hal/hal-console@3.5.12.Final
purl pkg:maven/org.jboss.hal/hal-console@3.5.12.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.5.12.Final
13
url pkg:maven/org.jboss.hal/hal-console@3.6.0.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.0.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.0.Final
14
url pkg:maven/org.jboss.hal/hal-console@3.6.1.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.1.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.1.Final
15
url pkg:maven/org.jboss.hal/hal-console@3.6.2.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.2.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.2.Final
16
url pkg:maven/org.jboss.hal/hal-console@3.6.3.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.3.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.3.Final
17
url pkg:maven/org.jboss.hal/hal-console@3.6.4.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.4.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.4.Final
18
url pkg:maven/org.jboss.hal/hal-console@3.6.5.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.5.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.5.Final
19
url pkg:maven/org.jboss.hal/hal-console@3.6.6.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.6.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.6.Final
20
url pkg:maven/org.jboss.hal/hal-console@3.6.7.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.7.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.7.Final
21
url pkg:maven/org.jboss.hal/hal-console@3.6.8.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.8.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.8.Final
22
url pkg:maven/org.jboss.hal/hal-console@3.6.9.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.9.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.9.Final
23
url pkg:maven/org.jboss.hal/hal-console@3.6.10.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.10.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.10.Final
24
url pkg:maven/org.jboss.hal/hal-console@3.6.11.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.11.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.11.Final
25
url pkg:maven/org.jboss.hal/hal-console@3.6.12.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.12.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.12.Final
26
url pkg:maven/org.jboss.hal/hal-console@3.6.13.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.13.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.13.Final
27
url pkg:maven/org.jboss.hal/hal-console@3.6.14.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.14.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.14.Final
28
url pkg:maven/org.jboss.hal/hal-console@3.6.15.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.15.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.15.Final
29
url pkg:maven/org.jboss.hal/hal-console@3.6.16.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.16.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.16.Final
30
url pkg:maven/org.jboss.hal/hal-console@3.6.17.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.17.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.17.Final
31
url pkg:maven/org.jboss.hal/hal-console@3.6.18.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.18.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.18.Final
32
url pkg:maven/org.jboss.hal/hal-console@3.6.19.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.19.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.19.Final
33
url pkg:maven/org.jboss.hal/hal-console@3.6.20.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.20.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.20.Final
34
url pkg:maven/org.jboss.hal/hal-console@3.6.21.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.21.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.21.Final
35
url pkg:maven/org.jboss.hal/hal-console@3.6.22.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.22.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.22.Final
36
url pkg:maven/org.jboss.hal/hal-console@3.6.23.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.23.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.23.Final
37
url pkg:maven/org.jboss.hal/hal-console@3.6.24.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.24.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.24.Final
38
url pkg:maven/org.jboss.hal/hal-console@3.6.27.Final
purl pkg:maven/org.jboss.hal/hal-console@3.6.27.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.6.27.Final
39
url pkg:maven/org.jboss.hal/hal-console@3.7.0.Final
purl pkg:maven/org.jboss.hal/hal-console@3.7.0.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.0.Final
40
url pkg:maven/org.jboss.hal/hal-console@3.7.4.Final
purl pkg:maven/org.jboss.hal/hal-console@3.7.4.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.4.Final
41
url pkg:maven/org.jboss.hal/hal-console@3.7.5.Final
purl pkg:maven/org.jboss.hal/hal-console@3.7.5.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.5.Final
42
url pkg:maven/org.jboss.hal/hal-console@3.7.6.Final
purl pkg:maven/org.jboss.hal/hal-console@3.7.6.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-gkqy-w15q-jud2
3
vulnerability VCID-w155-te58-v3fy
4
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.6.Final
43
url pkg:maven/org.jboss.hal/hal-console@3.7.7.Final
purl pkg:maven/org.jboss.hal/hal-console@3.7.7.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5du4-1bus-huhv
1
vulnerability VCID-8ew2-s4a9-u7cu
2
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.7.Final
44
url pkg:maven/org.jboss.hal/hal-console@3.7.8.Final
purl pkg:maven/org.jboss.hal/hal-console@3.7.8.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8ew2-s4a9-u7cu
1
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.8.Final
45
url pkg:maven/org.jboss.hal/hal-console@3.7.9.Final
purl pkg:maven/org.jboss.hal/hal-console@3.7.9.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8ew2-s4a9-u7cu
1
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.9.Final
46
url pkg:maven/org.jboss.hal/hal-console@3.7.10.Final
purl pkg:maven/org.jboss.hal/hal-console@3.7.10.Final
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8ew2-s4a9-u7cu
1
vulnerability VCID-zufu-x8dx-xygs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.hal/hal-console@3.7.10.Final
References
0
reference_url https://access.redhat.com/security/cve/CVE-2025-2901
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/security/cve/CVE-2025-2901
1
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2355685
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=2355685
2
reference_url https://github.com/hal/console
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/hal/console
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-2901
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-2901
4
reference_url https://github.com/advisories/GHSA-hp88-hfjw-2hg4
reference_id GHSA-hp88-hfjw-2hg4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hp88-hfjw-2hg4
Weaknesses
0
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-zufu-x8dx-xygs