Redhat Jboss Aerogear — known CVE vulnerabilities

Every CVE whose affected-product data names Redhat Jboss Aerogear, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2014-3648 — CVSS 7.5 (high): The simplepush server iterates through the application installations and pushes a notification to the server provided by deviceToken. But…
• CVE-2014-3649 — CVSS 6.1 (medium): JBoss AeroGear has reflected XSS via the password field
• CVE-2014-3650 — CVSS 5.4 (medium): Multiple persistent cross-site scripting (XSS) flaws were found in the way Aerogear handled certain user-supplied content. A remote…