Every CVE Search/ Get API key

CVE-2017-7554

It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user....

6.1 MediumFix available

It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored XSS attack on an application administrator using App Studio.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

0.93%Up 0.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.1

It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored XSS attack on an application administrator using App Studio.

Record
CVE-2017-7554
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored XSS attack on an application administrator using App Studio.

Record
CVE-2017-7554
Updated
2026-11-02
EUVDEUVD-2017-16562 No score

It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored XSS attack on an application administrator using App Studio.

Record
EUVD-2017-16562
Updated
2026-11-03
GitHub AdvisoriesGHSA-9589-9vq9-wh72 6.1

It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user....

It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored XSS attack on an application administrator using App Studio.

Record
GHSA-9589-9vq9-wh72
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
OSVRHSA-2017:2674 7.5

Red Hat Security Advisory: Red Hat Mobile Application Platform security update

Record
RHSA-2017:2674
CVSS 3.0
7.5 HighCVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:H
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
fh-system-dump-tool
Red Hat:mobile_application_platform:4.5
 before 0:1.0.0-5.el7
0:1.0.0-5.el7
fping
Red Hat:mobile_application_platform:4.5
 before 0:3.10-4.el7map
0:3.10-4.el7map
fping-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:3.10-4.el7map
0:3.10-4.el7map
nagios
Red Hat:mobile_application_platform:4.5
 before 0:4.0.8-8.el7map
0:4.0.8-8.el7map
nagios-common
Red Hat:mobile_application_platform:4.5
 before 0:4.0.8-8.el7map
0:4.0.8-8.el7map
nagios-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:4.0.8-8.el7map
0:4.0.8-8.el7map
nagios-devel
Red Hat:mobile_application_platform:4.5
 before 0:4.0.8-8.el7map
0:4.0.8-8.el7map
nagios-plugins
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-all
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-apt
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
Show 77 moreShow less
Affected packages
PackageAffectedFixed
nagios-plugins-breeze
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-by_ssh
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-cluster
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-dbi
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-dhcp
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-dig
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-disk
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-disk_smb
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-dns
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-dummy
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-file_age
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-flexlm
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-fping
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-game
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-hpjd
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-http
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-icmp
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ide_smart
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ifoperstatus
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ifstatus
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ircd
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ldap
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-load
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-log
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-mailq
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-mrtg
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-mrtgtraf
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-mysql
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-nagios
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-nt
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ntp
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ntp-perl
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-nwstat
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-oracle
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-overcr
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-perl
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-pgsql
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ping
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-procs
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-radius
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-real
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-rpc
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-sensors
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-smtp
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-snmp
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ssh
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-swap
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-tcp
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-time
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-ups
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-uptime
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-users
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
nagios-plugins-wave
Red Hat:mobile_application_platform:4.5
 before 0:2.0.3-3.el7map
0:2.0.3-3.el7map
perl-Crypt-CBC
Red Hat:mobile_application_platform:4.5
 before 0:2.33-2.el7map
0:2.33-2.el7map
perl-Crypt-DES
Red Hat:mobile_application_platform:4.5
 before 0:2.05-20.el7map
0:2.05-20.el7map
perl-Crypt-DES-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:2.05-20.el7map
0:2.05-20.el7map
perl-Net-SNMP
Red Hat:mobile_application_platform:4.5
 before 0:6.0.1-7.el7map
0:6.0.1-7.el7map
phantomjs
Red Hat:mobile_application_platform:4.5
 before 0:1.9.7-3.el7map
0:1.9.7-3.el7map
phantomjs-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:1.9.7-3.el7map
0:1.9.7-3.el7map
python-meld3
Red Hat:mobile_application_platform:4.5
 before 0:0.6.10-1.el7map
0:0.6.10-1.el7map
python-meld3-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:0.6.10-1.el7map
0:0.6.10-1.el7map
qstat
Red Hat:mobile_application_platform:4.5
 before 0:2.11-13.20080912svn311.el7map
0:2.11-13.20080912svn311.el7map
qstat-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:2.11-13.20080912svn311.el7map
0:2.11-13.20080912svn311.el7map
radiusclient-ng
Red Hat:mobile_application_platform:4.5
 before 0:0.5.6-9.el7map
0:0.5.6-9.el7map
radiusclient-ng-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:0.5.6-9.el7map
0:0.5.6-9.el7map
radiusclient-ng-devel
Red Hat:mobile_application_platform:4.5
 before 0:0.5.6-9.el7map
0:0.5.6-9.el7map
radiusclient-ng-utils
Red Hat:mobile_application_platform:4.5
 before 0:0.5.6-9.el7map
0:0.5.6-9.el7map
redis
Red Hat:mobile_application_platform:4.5
 before 0:2.8.21-2.el7map
0:2.8.21-2.el7map
redis-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:2.8.21-2.el7map
0:2.8.21-2.el7map
rhmap-fh-openshift-templates
Red Hat:mobile_application_platform:4.5
 before 0:4.5.0-11.el7
0:4.5.0-11.el7
rhmap-mod_authnz_external
Red Hat:mobile_application_platform:4.5
 before 0:3.3.1-7.el7map
0:3.3.1-7.el7map
rhmap-mod_authnz_external-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:3.3.1-7.el7map
0:3.3.1-7.el7map
sendEmail
Red Hat:mobile_application_platform:4.5
 before 0:1.56-2.el7
0:1.56-2.el7
ssmtp
Red Hat:mobile_application_platform:4.5
 before 0:2.64-14.el7map
0:2.64-14.el7map
ssmtp-debuginfo
Red Hat:mobile_application_platform:4.5
 before 0:2.64-14.el7map
0:2.64-14.el7map
supervisor
Red Hat:mobile_application_platform:4.5
 before 0:3.1.3-3.el7map
0:3.1.3-3.el7map

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-7554 is a medium vulnerability (CVSS 6.1) in Redhat Mobile Application Platform, published September 28, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.93%, the 60th percentile. Fixed in fh-system-dump-tool 0:1.0.0-5.el7.

References

Show 19 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open