Skip to content
VulniPulse
Sign in
Highest advisory severityMedium 1 vendor · 1 advisory

CVE-2024-10234

CVE-2024-10234: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

Red Hat

1 advisory
  • Advisory severityMedium6.1

    Medium [CVE-2024-10234] wildfly vulnerable to cross-site scripting (xss)

    CVE-2024-10234Source published Source updated

    A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server. Red Hat severity: Moderate — CVSS 6.1 (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N). Weakness: CWE-79. Affected Red Hat products: Red Hat JBoss Enterprise Application Platform 7; Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8; Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9; Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7; Red Hat JBoss Enterprise Application Platform 8; Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8; Red Hat JBoss Enterprise Application Platform 8.0 for…

    Affected products in this advisory
    • Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
    • Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
    • Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
    • Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

    8 more entries in the full advisory.

    Source-reported affected versions
    Affected-version details not available in this record.
    Source-reported fixed versions
    • wildfly-core-management-subsystem
    • eap7-activemq-artemis-0:2.16.0-21.redhat_00055.1.el8eap
    • eap7-apache-cxf-0:3.5.10-1.redhat_00001.1.el8eap
    • eap7-artemis-native-1:1.0.2-5.redhat_00004.1.el8eap

    46 more entries in the full advisory.

    Mitigation guidance
    No mitigation guidance extracted; consult the source.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Monitor future Red Hat CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features