https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T14:41:09.755097+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-04258 cnvd-2017-04258 2026-10-16T14:41:09.759126+00:00 cnvd-2017-04258 https://cve.radiocsirt.org/vuln/euvd-2026-85796 EUVD-2026-85796 2026-10-16T14:41:09.759159+00:00 EUVD-2026-85796 https://cve.radiocsirt.org/vuln/fkie_cve-2016-6343 fkie_cve-2016-6343 2026-10-16T14:41:09.759172+00:00

JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder (usually admins) to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of script code within the context of the affected user.

 https://cve.radiocsirt.org/vuln/ghsa-6cfp-g7xp-c376 GHSA-6cfp-g7xp-c376 2026-10-16T14:41:09.759199+00:00

JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder (usually admins) to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of script code within the context of the affected user.

 https://cve.radiocsirt.org/vuln/gsd-2016-6343 gsd-2016-6343 2026-10-16T14:41:09.759216+00:00 gsd-2016-6343 https://cve.radiocsirt.org/vuln/rhsa-2017:0557 RHSA-2017:0557 — Red Hat Security Advisory: Red Hat JBoss BPM Suite security update 2026-10-16T14:41:09.759226+00:00

Dashbuilder: Reflected XSS Dashbuilder: insecure handling of CSRF token Dashbuilder: Lack of clickjacking protection on the login page