1209 matches found
Red Hat JBoss - Web/JMX Console Access
Red Hat JBoss Enterprise Application Platform EAP can expose the Web Console, JMX Console, and JMXInvokerServlet without authentication, allowing remote attackers to reach admin dashboards and interact with MBeans, leading to full server compromise. id: CVE-2010-1428 info: name: Red Hat JBoss -...
JBoss JMX/Web Console - Authentication Bypass via HTTP Verb Tampering
JBoss EAP 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 only enforce authentication for GET/POST on the JMX and Web consoles because the web.xml security-constraint enumerates only those verbs in . Non-standard verbs such as HEAD skip the constraint, granting unauthenticated access to MBean...
Red Hat JBoss Enterprise Application Platform authorization issue vulnerability
Red Hat JBoss Enterprise Application Platform versions 7 and 8 contain an authorization issue vulnerability. This vulnerability arises because the handler for read-resource operations within the runtime management resources of the platform-mbean component fails to perform the required role-based...
RHEL 8 : Red Hat JBoss Enterprise Application Platform 8.1.9 (RHSA-2026:92057)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92057 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release ...
Vulnerability related to the software supply chain issue in Red Hat JBoss Enterprise Application Platform
Red Hat JBoss Enterprise Application Platform versions 7 and 8 contain a vulnerability related to the software supply chain. This vulnerability arises because the Wildfly IIOP listener permits deserialization of input streams prior to authentication, potentially allowing attackers to access the...
RHEL 10 : Red Hat JBoss Enterprise Application Platform 8.1.9 (RHSA-2026:92059)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92059 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release...
RHEL 9 : Red Hat JBoss Enterprise Application Platform 8.1.9 (RHSA-2026:92056)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92056 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release ...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update
A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update
An update is now available for Red Hat JBoss Enterprise Application Platform 8.1 for Red Hat Enterprise Linux 8. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update
A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1 for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Vulnerability related to the software supply chain issue in Red Hat JBoss Enterprise Application Platform
Red Hat JBoss Enterprise Application Platform versions 7 and 8 contain a vulnerability related to the software supply chain. This vulnerability arises because the JDKBridge in openjdk-orb trusts a CDR code library URL provided by attackers when performing object deserialization on port 3528. As a...
EUVD-2026-104675
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication...
CVE-2026-107400
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication...
IBM TRIRIGA Application Platform Authorization Vulnerability
The IBM TRIRIGA Application Platform versions 5.0.0 to 5.0.8 have an authorization issue vulnerability. This vulnerability stems from improper authentication procedures, which may allow remotely authenticated attackers to execute arbitrary code...
PT-2026-117700
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication...
EUVD-2026-98085
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection flaw...
EUVD-2026-98084
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response...
EUVD-2026-98083
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction...