CVE-2015-0862 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2015-0862 Interim 1 20 2025-11-05T04:56:18Z current 2021-05-30T13:26:55Z 2025-11-05T04:56:18Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2015-0862 Multiple cross-site scripting (XSS) vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) message details when a message is unqueued, such as headers or arguments; (2) policy names, which are not properly handled when viewing policies; (3) details for AMQP network clients, such as the version; allow remote authenticated administrators to inject arbitrary web script or HTML via (4) user names, (5) the cluster name; or allow RabbitMQ cluster administrators to (6) modify unspecified content. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP7 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE OpenStack Cloud 6 openSUSE Tumbleweed erlang-rabbitmq-client erlang-rabbitmq-client-3.13.7-160000.2.2 erlang-rabbitmq-client-3.5.4-1.4 erlang-rabbitmq-client-3.8.11-1.26 erlang-rabbitmq-client-3.8.11-150300.3.14.1 erlang-rabbitmq-client-3.8.11-3.3.3 erlang-rabbitmq-client-3.8.3-1.27 erlang-rabbitmq-client313-3.13.1-150600.13.5.3 rabbitmq-server rabbitmq-server-3.13.7-160000.2.2 rabbitmq-server-3.4.4-2.20 rabbitmq-server-3.5.4-1.4 rabbitmq-server-3.8.11-1.26 rabbitmq-server-3.8.11-150300.3.14.1 rabbitmq-server-3.8.11-3.3.3 rabbitmq-server-3.8.3-1.27 rabbitmq-server-bash-completion-3.13.7-160000.2.2 rabbitmq-server-plugins rabbitmq-server-plugins-3.13.7-160000.2.2 rabbitmq-server-plugins-3.4.4-2.20 rabbitmq-server-plugins-3.5.4-1.4 rabbitmq-server-plugins-3.8.11-1.26 rabbitmq-server-plugins-3.8.11-150300.3.14.1 rabbitmq-server-plugins-3.8.11-3.3.3 rabbitmq-server-plugins-3.8.3-1.27 rabbitmq-server-zsh-completion-3.13.7-160000.2.2 rabbitmq-server313-3.13.1-150600.13.5.3 rabbitmq-server313-bash-completion-3.13.1-150600.13.5.3 rabbitmq-server313-plugins-3.13.1-150600.13.5.3 rabbitmq-server313-zsh-completion-3.13.1-150600.13.5.3 erlang-rabbitmq-client-3.8.3-1.27 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 rabbitmq-server-3.8.3-1.27 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 rabbitmq-server-plugins-3.8.3-1.27 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 erlang-rabbitmq-client-3.8.11-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 rabbitmq-server-3.8.11-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 rabbitmq-server-plugins-3.8.11-1.26 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 erlang-rabbitmq-client-3.8.11-3.3.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 rabbitmq-server-3.8.11-3.3.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 rabbitmq-server-plugins-3.8.11-3.3.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 erlang-rabbitmq-client-3.8.11-150300.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 erlang-rabbitmq-client313-3.13.1-150600.13.5.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 rabbitmq-server-3.8.11-150300.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 rabbitmq-server-plugins-3.8.11-150300.3.14.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 rabbitmq-server313-3.13.1-150600.13.5.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 rabbitmq-server313-bash-completion-3.13.1-150600.13.5.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 rabbitmq-server313-plugins-3.13.1-150600.13.5.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 rabbitmq-server313-zsh-completion-3.13.1-150600.13.5.3 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP7 erlang-rabbitmq-client-3.13.7-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 rabbitmq-server-3.13.7-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 rabbitmq-server-bash-completion-3.13.7-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 rabbitmq-server-plugins-3.13.7-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 rabbitmq-server-zsh-completion-3.13.7-160000.2.2 as a component of SUSE Linux Enterprise Server 16.0 rabbitmq-server-3.4.4-2.20 as a component of SUSE OpenStack Cloud 6 rabbitmq-server-plugins-3.4.4-2.20 as a component of SUSE OpenStack Cloud 6 erlang-rabbitmq-client-3.5.4-1.4 as a component of openSUSE Tumbleweed rabbitmq-server-3.5.4-1.4 as a component of openSUSE Tumbleweed rabbitmq-server-plugins-3.5.4-1.4 as a component of openSUSE Tumbleweed erlang-rabbitmq-client as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 rabbitmq-server as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 rabbitmq-server-plugins as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 Multiple cross-site scripting (XSS) vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) message details when a message is unqueued, such as headers or arguments; (2) policy names, which are not properly handled when viewing policies; (3) details for AMQP network clients, such as the version; allow remote authenticated administrators to inject arbitrary web script or HTML via (4) user names, (5) the cluster name; or allow RabbitMQ cluster administrators to (6) modify unspecified content. CVE-2015-0862 SUSE Linux Enterprise Module for Server Applications 15 SP2:erlang-rabbitmq-client-3.8.3-1.27 SUSE Linux Enterprise Module for Server Applications 15 SP2:rabbitmq-server-3.8.3-1.27 SUSE Linux Enterprise Module for Server Applications 15 SP2:rabbitmq-server-plugins-3.8.3-1.27 SUSE Linux Enterprise Module for Server Applications 15 SP3:erlang-rabbitmq-client-3.8.11-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP3:rabbitmq-server-3.8.11-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP3:rabbitmq-server-plugins-3.8.11-1.26 SUSE Linux Enterprise Module for Server Applications 15 SP4:erlang-rabbitmq-client-3.8.11-3.3.3 SUSE Linux Enterprise Module for Server Applications 15 SP4:rabbitmq-server-3.8.11-3.3.3 SUSE Linux Enterprise Module for Server Applications 15 SP4:rabbitmq-server-plugins-3.8.11-3.3.3 SUSE Linux Enterprise Module for Server Applications 15 SP7:erlang-rabbitmq-client-3.8.11-150300.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:erlang-rabbitmq-client313-3.13.1-150600.13.5.3 SUSE Linux Enterprise Module for Server Applications 15 SP7:rabbitmq-server-3.8.11-150300.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:rabbitmq-server-plugins-3.8.11-150300.3.14.1 SUSE Linux Enterprise Module for Server Applications 15 SP7:rabbitmq-server313-3.13.1-150600.13.5.3 SUSE Linux Enterprise Module for Server Applications 15 SP7:rabbitmq-server313-bash-completion-3.13.1-150600.13.5.3 SUSE Linux Enterprise Module for Server Applications 15 SP7:rabbitmq-server313-plugins-3.13.1-150600.13.5.3 SUSE Linux Enterprise Module for Server Applications 15 SP7:rabbitmq-server313-zsh-completion-3.13.1-150600.13.5.3 SUSE Linux Enterprise Server 16.0:erlang-rabbitmq-client-3.13.7-160000.2.2 SUSE Linux Enterprise Server 16.0:rabbitmq-server-3.13.7-160000.2.2 SUSE Linux Enterprise Server 16.0:rabbitmq-server-bash-completion-3.13.7-160000.2.2 SUSE Linux Enterprise Server 16.0:rabbitmq-server-plugins-3.13.7-160000.2.2 SUSE Linux Enterprise Server 16.0:rabbitmq-server-zsh-completion-3.13.7-160000.2.2 SUSE OpenStack Cloud 6:rabbitmq-server-3.4.4-2.20 SUSE OpenStack Cloud 6:rabbitmq-server-plugins-3.4.4-2.20 openSUSE Tumbleweed:erlang-rabbitmq-client-3.5.4-1.4 openSUSE Tumbleweed:rabbitmq-server-3.5.4-1.4 openSUSE Tumbleweed:rabbitmq-server-plugins-3.5.4-1.4 SUSE Linux Enterprise Module for Server Applications 15 SP2:erlang-rabbitmq-client SUSE Linux Enterprise Module for Server Applications 15 SP2:rabbitmq-server SUSE Linux Enterprise Module for Server Applications 15 SP2:rabbitmq-server-plugins low 3.5 AV:N/AC:M/Au:S/C:N/I:P/A:N