CVE-2018-1000129

An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.

CVSS v3.0

6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v3.0

6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

24.67% chance of exploitation in the next 30 days, 98th percentile

Nuclei

medium · CWE-79

Published

2018-03-14

Updated

2024-08-05

Proof-of-concept exploits (1)

• shoucheng3/rhuss__jolokia_CVE-2018-1000129_1-4-00★ · 2025-12-01

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000129.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2018-1000126
• CVE-2018-1000130
• CVE-2018-1000124
• CVE-2018-1000137
• CVE-2018-1000117
• CVE-2018-1000138