CVE-2024-10234

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 6.1EPSS <1%

Published 2024-10-22Updated 2025-01-02

Exploited in the wild

Vulnerability details

A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server.

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N

CNAredhat

EPSS score history

Sources

3 links

PoC links are not available for guest users. Login to view them.

InTheWild CVE Organization RedHat Vuln DB

Profile

CVSS

6.1

EPSS

<1%

Published

2024-10-22

Updated

2025-01-02

CNA

redhat

Vendors

No vendors listed.

CPEs

cpe:/a:redhat:jboss_enterprise_application_platform:7.4

cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8

cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9

cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7

cpe:/a:redhat:jboss_enterprise_application_platform:8.0

cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el8

cpe:/a:redhat:jboss_enterprise_application_platform:8.0::el9

cpe:/a:redhat:red_hat_single_sign_on:7.6

cpe:/a:redhat:red_hat_single_sign_on:7.6::el7

cpe:/a:redhat:red_hat_single_sign_on:7.6::el8

cpe:/a:redhat:red_hat_single_sign_on:7.6::el9

cpe:/a:redhat:rhosemc:1.0::el8

cpe:/a:redhat:build_keycloak:

cpe:/a:redhat:jboss_fuse:7

cpe:/a:redhat:jboss_data_grid:7

cpe:/a:redhat:jbosseapxp

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated