CVE-2017-7554

It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user....

6.1 Medium

It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored XSS attack on an application administrator using App Studio.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: None

Exploit likelihood

0.93%Up 0.1 points since Apr 14, 2021

What each source reports

NVD Score used 6.1

Record: CVE-2017-7554
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Record: CVE-2017-7554
Updated: 2026-11-02

EUVDEUVD-2017-16562 No score

Record: EUVD-2017-16562
Updated: 2026-11-03

GitHub AdvisoriesGHSA-9589-9vq9-wh72 6.1

It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user....

Record: GHSA-9589-9vq9-wh72
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness: CWE-79
Updated: 2026-11-02

OSVRHSA-2017:2674 7.5

Red Hat Security Advisory: Red Hat Mobile Application Platform security update

Record: RHSA-2017:2674
CVSS 3.0: 7.5 HighCVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:H
Updated: 2026-11-02

Affected products

redhat mobile application platform

Affected packages

Affected packages
Package	Affected	Fixed
`fh-system-dump-tool` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:1.0.0-5.el7	0:1.0.0-5.el7
`fping` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:3.10-4.el7map	0:3.10-4.el7map
`fping-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:3.10-4.el7map	0:3.10-4.el7map
`nagios` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:4.0.8-8.el7map	0:4.0.8-8.el7map
`nagios-common` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:4.0.8-8.el7map	0:4.0.8-8.el7map
`nagios-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:4.0.8-8.el7map	0:4.0.8-8.el7map
`nagios-devel` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:4.0.8-8.el7map	0:4.0.8-8.el7map
`nagios-plugins` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-all` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-apt` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map

Show 77 moreShow less

Affected packages
Package	Affected	Fixed
`nagios-plugins-breeze` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-by_ssh` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-cluster` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-dbi` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-dhcp` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-dig` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-disk` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-disk_smb` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-dns` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-dummy` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-file_age` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-flexlm` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-fping` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-game` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-hpjd` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-http` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-icmp` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ide_smart` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ifoperstatus` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ifstatus` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ircd` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ldap` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-load` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-log` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-mailq` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-mrtg` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-mrtgtraf` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-mysql` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-nagios` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-nt` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ntp` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ntp-perl` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-nwstat` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-oracle` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-overcr` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-perl` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-pgsql` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ping` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-procs` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-radius` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-real` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-rpc` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-sensors` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-smtp` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-snmp` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ssh` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-swap` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-tcp` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-time` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ups` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-uptime` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-users` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-wave` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`perl-Crypt-CBC` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.33-2.el7map	0:2.33-2.el7map
`perl-Crypt-DES` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.05-20.el7map	0:2.05-20.el7map
`perl-Crypt-DES-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.05-20.el7map	0:2.05-20.el7map
`perl-Net-SNMP` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:6.0.1-7.el7map	0:6.0.1-7.el7map
`phantomjs` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:1.9.7-3.el7map	0:1.9.7-3.el7map
`phantomjs-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:1.9.7-3.el7map	0:1.9.7-3.el7map
`python-meld3` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:0.6.10-1.el7map	0:0.6.10-1.el7map
`python-meld3-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:0.6.10-1.el7map	0:0.6.10-1.el7map
`qstat` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.11-13.20080912svn311.el7map	0:2.11-13.20080912svn311.el7map
`qstat-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.11-13.20080912svn311.el7map	0:2.11-13.20080912svn311.el7map
`radiusclient-ng` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:0.5.6-9.el7map	0:0.5.6-9.el7map
`radiusclient-ng-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:0.5.6-9.el7map	0:0.5.6-9.el7map
`radiusclient-ng-devel` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:0.5.6-9.el7map	0:0.5.6-9.el7map
`radiusclient-ng-utils` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:0.5.6-9.el7map	0:0.5.6-9.el7map
`redis` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.8.21-2.el7map	0:2.8.21-2.el7map
`redis-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.8.21-2.el7map	0:2.8.21-2.el7map
`rhmap-fh-openshift-templates` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:4.5.0-11.el7	0:4.5.0-11.el7
`rhmap-mod_authnz_external` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:3.3.1-7.el7map	0:3.3.1-7.el7map
`rhmap-mod_authnz_external-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:3.3.1-7.el7map	0:3.3.1-7.el7map
`sendEmail` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:1.56-2.el7	0:1.56-2.el7
`ssmtp` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.64-14.el7map	0:2.64-14.el7map
`ssmtp-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.64-14.el7map	0:2.64-14.el7map
`supervisor` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:3.1.3-3.el7map	0:3.1.3-3.el7map

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-7554 is a medium vulnerability (CVSS 6.1) in Redhat Mobile Application Platform, published September 28, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.93%, the 60th percentile. No source names a fixed version.

References

Show 19 moreShow less