CVE-2016-6343

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder (usually admins) to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of script code within the context of the affected user.

Metrics

CVSS 3.0 5.4/10CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
[UNKNOWN]	Dashbuilder	n/a

References

http://rhn.redhat.com/errata/RHSA-2017-0557.htmlBroken Link, Vendor Advisory
http://www.securityfocus.com/bid/96987Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:0296Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-6343Issue Tracking
http://rhn.redhat.com/errata/RHSA-2017-0557.htmlBroken Link, Vendor Advisory
http://www.securityfocus.com/bid/96987Third Party Advisory, VDB Entry
https://access.redhat.com/errata/RHSA-2018:0296Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-6343Issue Tracking

Timeline

Published: Oct 31, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-63445.3Red Hat JBoss BPM Suite 6.3.x does not include the HTTPOnly flag in a Set-Cookie header for session cookies, which makes it easier for remot CVE-2016-63456.5RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs.CVE-2016-63467.5RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors.CVE-2016-63476.1Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script CVE-2016-63486.1JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack.CVE-2016-63493.3The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by ru CVE-2016-63505.5OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (NULL pointer dereference and panic) via a sysctl call with a path start CVE-2016-63516.7The esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP/NCR53C9x controller emulation support, allows loc CVE-2016-63527.5The OneLine32 function in io-ico.c in gdk-pixbuf before 2.35.3 allows remote attackers to cause a denial of service (out-of-bounds write and CVE-2016-63536.5Cloudera Search in CDH before 5.7.0 allows unauthorized document access because Solr Queries by document id can bypass Sentry document-level CVE-2016-63549.8Heap-based buffer overflow in the yy_get_next_buffer function in Flex before 2.6.1 might allow context-dependent attackers to cause a denial CVE-2016-63557.5Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to