CVE-2013-6495: Red Hat JBoss Enterprise Application Platform

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

JBossWeb Bayeux has reflected XSS

Affected products

• Red Hat JBoss Enterprise Application Platform: from 6.0.0, before 6.1.1 (fixed in 6.1.1)
• Red Hat JBoss Portal: from 6.0.0, before 6.1.0 (fixed in 6.1.0)

Published 2019-12-11. Last modified 2026-06-17.