6.1

CVE-2017-4967

An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and these RabbitMQ for PCF versions: all 1.5.x versions, 1.6.x versions prior to 1.6.18, and 1.7.x versions prior to 1.7.15. Several forms in the RabbitMQ management UI are vulnerable to XSS attacks.

Data is provided by the National Vulnerability Database (NVD)
Broadcom ≫ Rabbitmq Server Version3.4.0
Broadcom ≫ Rabbitmq Server Version3.4.1
Broadcom ≫ Rabbitmq Server Version3.4.2
Broadcom ≫ Rabbitmq Server Version3.4.3
Broadcom ≫ Rabbitmq Server Version3.4.4
Broadcom ≫ Rabbitmq Server Version3.5.0
Broadcom ≫ Rabbitmq Server Version3.5.1
Broadcom ≫ Rabbitmq Server Version3.5.2
Broadcom ≫ Rabbitmq Server Version3.5.3
Broadcom ≫ Rabbitmq Server Version3.5.6
Broadcom ≫ Rabbitmq Server Version3.6.7
Pivotal Software ≫ Rabbitmq Version3.5.4
Pivotal Software ≫ Rabbitmq Version3.5.5
Pivotal Software ≫ Rabbitmq Version3.5.7
Pivotal Software ≫ Rabbitmq Version3.6.0
Pivotal Software ≫ Rabbitmq Version3.6.1
Pivotal Software ≫ Rabbitmq Version3.6.2
Pivotal Software ≫ Rabbitmq Version3.6.3
Pivotal Software ≫ Rabbitmq Version3.6.4
Pivotal Software ≫ Rabbitmq Version3.6.5
Pivotal Software ≫ Rabbitmq Version3.6.6
Pivotal Software ≫ Rabbitmq Version1.5.0 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.1 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.2 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.3 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.4 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.5 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.6 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.7 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.8 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.9 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.10 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.11 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.12 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.13 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.14 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.15 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.17 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.18 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.5.19 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.6.0 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.6.1 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.6.2 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.6.3 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.6.4 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.6.5 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.6.6 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.6.7 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.6.8 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.6.9 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.6.10 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.6.12 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.6.13 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.6.14 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.6.15 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.6.16 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.7.0 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.7.2 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.7.3 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.7.4 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.7.5 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.7.6 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.7.7 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.7.8 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.7.9 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.7.10 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.7.13 SwPlatformpivotal_cloud_foundry
Pivotal Software ≫ Rabbitmq Version1.7.14 SwPlatformpivotal_cloud_foundry
Debian ≫ Debian Linux Version9.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.6% 0.684
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://pivotal.io/security/cve-2017-4965
Vendor Advisory
Mitigation