title: Red Hat Security Advisory: pki-core security update
description: pki-core: Reflected XSS in 'path length' constraint field in CA's Agent page pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab pki-core: Reflected XSS in getcookies?url= endpoint in CA pki-core: KRA vulnerable to reflected XSS via the getPk12 page pki-core: XSS in the certificate search results pki-core: Unprivileged users can renew any certificate
cpes: cpe:/o:redhat:rhel_eus:7.7::computenode cpe:/o:redhat:rhel_eus:7.7::server