CVE-2011-3206

Published: Jan 8, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in RHQ 4.2.0, as used in JBoss Operations Network (aka JON or JBoss ON) before 3.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected (9)

Products: Redhat: Jboss Operations Network · Rhq Project: Rhq

Redhat

1 product

Jboss Operations Network

Rhq Project

1 product

Rhq

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Redhat Jboss Operations Network	Up to 2.4.1
Redhat Jboss Operations Network	Version 2.0.0
Redhat Jboss Operations Network	Version 2.0.1
Redhat Jboss Operations Network	Version 2.1.0
Redhat Jboss Operations Network	Version 2.2
Redhat Jboss Operations Network	Version 2.3.1
Redhat Jboss Operations Network	Version 2.3
Redhat Jboss Operations Network	Version 2.4
Rhq Project Rhq	Version 4.2.0