CVE-2013-1885: Red Hat Certificate System

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) tus/ or (2) tus/tus/.

Affected products

• Red Hat Certificate System: version 8.1 only
• Red Hat Dogtag Certificate System: version 9.0 only; version 10.0 only

Published 2014-01-24. Last modified 2026-06-16.