CVE-2013-6235

Publication date 31 January 2014

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Description

Multiple cross-site scripting (XSS) vulnerabilities in JAMon (Java Application Monitor) 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listenertype or (2) currentlistener parameter to mondetail.jsp or ArraySQL parameter to (3) mondetail.jsp, (4) jamonadmin.jsp, (5) sql.jsp, or (6) exceptions.jsp.

Read the notes from the security team

Status

Package Ubuntu Release Status
libjamon-java 13.10 saucy
Not affected
12.10 quantal
Not affected
12.04 LTS precise
Not affected
10.04 LTS lucid Ignored end of life

Notes

mdeslaur

jamon.war/JAMon web apps gets excluded by debian/orig-tar.sh

References

Other references