CVE-2013-6235

N/A Unknown
Published: January 31, 2014 Modified: April 29, 2026
View on NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in JAMon (Java Application Monitor) 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listenertype or (2) currentlistener parameter to mondetail.jsp or ArraySQL parameter to (3) mondetail.jsp, (4) jamonadmin.jsp, (5) sql.jsp, or (6) exceptions.jsp.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://osvdb.org/102570
Source: cve@mitre.org
http://osvdb.org/102571
Source: cve@mitre.org
http://osvdb.org/102572
Source: cve@mitre.org
http://osvdb.org/102573
Source: cve@mitre.org
http://packetstormsecurity.com/files/124933
Source: cve@mitre.org
Exploit
http://seclists.org/fulldisclosure/2014/Jan/164
Source: cve@mitre.org
Exploit
http://www.securityfocus.com/archive/1/530877/100/0/threaded
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/90699
Source: cve@mitre.org
http://osvdb.org/102570
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/102571
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/102572
Source: af854a3a-2127-422b-91ae-364da2661108
http://osvdb.org/102573
Source: af854a3a-2127-422b-91ae-364da2661108
http://packetstormsecurity.com/files/124933
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://seclists.org/fulldisclosure/2014/Jan/164
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.securityfocus.com/archive/1/530877/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/90699
Source: af854a3a-2127-422b-91ae-364da2661108

16 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.4%
60th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-79

Affected Vendors

steve_souza

Related CVEs

CVE-2026-7182 N/A
CVE-2026-41553 N/A
CVE-2026-41552 N/A
CVE-2026-8503 N/A
CVE-2026-8454 N/A