CVE-2016-7065

The JMX servlet in Red Hat JBoss Enterprise Application Platform EAP 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.10 update

An update is now available for Red Hat JBoss Enterprise Application Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2016-7046

Red Hat JBoss Enterprise Application Platform EAP 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service CPU and disk consumption via a long URL...

Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 7.0.2 for RHEL 7

Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.0.2, fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scori...

Tryton Information Disclosure Vulnerability

Tryton is a set of general-purpose application platform based on Python and PostgreSQL. It is an independent branch project of OpenERP Enterprise Resource Planning ERP and Customer Relationship Management CRM system, which contains modules for financial management, marketing management, customer...

Buffer overflow vulnerability in multiple Huawei products (CNVD-2016-06332)

The Huawei USG5500, USG2100, USG2200, and USG5100 are firewall products from Huawei China. A buffer overflow vulnerability exists in multiple Huawei products, which stems from the program failing to perform proper boundary checks on user-submitted input. A remote attacker could exploit the...

New too openEAP enterprise application platform without the log file upload vulnerability

No description provided by source...

IBM TRIRIGA Application Platform Cross-Site Scripting Vulnerability (CNVD-2016-05021)

IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. A cross-site scripting vulnerability exists in IBM TRIRIGA Application Platform, which can be exploited by an attacker to inject arbitrary Web script or HTML...

CVE-2016-0387

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2883...

Design/Logic Flaw

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to obtain sensitive information by reading HTTP responses...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to hijack the authentication of administrators for requests that delete employees...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0387...

CVE-2016-2882

CVE-2016-2882 affects IBM TRIRIGA Application Platform 3.3 (pre-3.3.2.6), 3.4 (pre-3.4.2.4), and 3.5 (pre-3.5.0.2). The vulnerability allows remote authenticated users to obtain sensitive information by reading HTTP responses. The IBM Security Bulletin confirms affected versions and provides fixe...

CVE-2016-0387

Summary: CVE-2016-0387 is an IBM TRIRIGA Application Platform XSS vulnerability. The issue arises from improper validation of user-supplied input, allowing remote, authenticated users to execute arbitrary script via a crafted URL. Affected versions are 3.3 (before 3.3.2.6), 3.4 (before 3.4.2.4), ...

CVE-2016-2883

IBM TRIRIGA Application Platform is affected by CVE-2016-2883, a cross-site scripting (XSS) vulnerability caused by improper validation of user-supplied input. A remote authenticated attacker can execute script or HTML in a victim’s browser via a specially crafted URL. Affected versions are: 3.3 ...

CVE-2016-0374

The builder tools in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allow remote authenticated users to gain privileges for application modification via unspecified vectors...

Code injection

The builder tools in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allow remote authenticated users to gain privileges for application modification via unspecified vectors...

CVE-2016-0374

Summary (CVE-2016-0374): IBM TRIRIGA Application Platform builder tools (versions 3.3 before 3.3.2.6; 3.4 before 3.4.2.4; 3.5 before 3.5.0.2) are affected. A security issue allows remote authenticated users to gain privileges for application modification via unspecified vectors. IBM’s bulletin id...

CVE-2016-0362

Vulnerability (CVE-2016-0362) affects IBM TRIRIGA Application Platform versions 3.3.x before 3.3.2.6, 3.4.x before 3.4.2.4, and 3.5.x before 3.5.0.2. The issue is a server-side request forgery (SSRF) via a crafted proxy request to a web service, allowing remote authenticated users to trigger netw...

Red Hat JBoss Enterprise Application Platform Security Bypass Vulnerability

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source, J2EE-based middleware platform. A security bypass vulnerability exists in Red Hat JBoss EAP version 5, which can be exploited by an attacker to bypass security restrictions and cau...