CVE-2013-4128

Red Hat JBoss Enterprise Application Platform EAP 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote attackers to hijack sessions by using a remoting client...

CVE-2013-4213

Red Hat JBoss Enterprise Application Platform EAP 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client...

PT-2013-4861

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform EAP version 6.1.0 Description The issue is related to improper caching of EJB invocations by remote-naming, allowing remote attackers to hijack sessions using a remoting client. Recommendations For...

CVE-2013-4213: Improper Access Control

Red Hat JBoss Enterprise Application Platform EAP 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client...

PT-2013-4902

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform EAP version 6.1.0 Description The issue is related to improper caching of EJB invocations by the EJB client API, allowing remote attackers to hijack sessions. Recommendations For Red Hat JBoss...

CVE-2013-4128: Undefined Security Weakness

Red Hat JBoss Enterprise Application Platform EAP 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote attackers to hijack sessions by using a remoting client...

CVE-2011-1483

wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterpris...

PT-2013-1393

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform versions 4.2.0.CP09 through 5.1.1 Red Hat JBoss Enterprise Portal Platform versions 4.3.CP06 through 5.1.1 Red Hat JBoss Enterprise SOA Platform versions 4.2.CP05 through 5.1.0 Red Hat JBoss...

CVE-2011-1483: Undefined Security Weakness

wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterpris...

CVE-2013-2165

ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBo...

Critical: Red Hat Security Advisory: jboss-seam2 security update

Updated jboss-seam2 packages that fix one security issue are now available for Red Hat JBoss Enterprise Application Platform 4.3.0 CP10 for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring...

Critical: Red Hat Security Advisory: richfaces security update

Updated richfaces packages that fix one security issue are now available for Red Hat JBoss Enterprise Application Platform 5.2.0 for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring...

Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 6.1.0 update

Updated JBoss Enterprise Application Platform 6.1.0 packages that fix three security issues, various bugs, and add enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability...

CVE-2012-5948

Multiple cross-site scripting XSS vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 WebProcess.srv, 2 the html/en/default/ directory, 3 Widget/resource, 4 birt/frameset, or 5...

CVE-2012-5949

CVE-2012-5949 involves multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform versions 2.x and 3.x before 3.3, and 8. The issues enable remote attackers to inject content and conduct phishing via specific vectors: (1) html/en/default/ directory, (2) birt/frameset,...

CVE-2012-5950

The CVE refers to multiple CSRF vulnerabilities in IBM TRIRIGA Application Platform (2.x and 3.x before 3.3, and 8). The underlying issue enables remote attackers to hijack the authentication of arbitrary users when performing requests that modify data records via two vectors: (1) the html/en/def...

CVE-2012-5948

CVE-2012-5948 covers multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8. The described attack vectors include WebProcess.srv, the html/en/default/ directory, Widget/resource, birt/frameset, and ganttlib/gantt-jws.jnlp. The NVD ent...

PT-2013-1862

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 2.x through 3.x before 3.3 IBM TRIRIGA Application Platform version 8 Description The issue allows remote attackers to hijack the authentication of arbitrary users for requests that modify data records...

PT-2013-1860

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 2.x through 3.x before 3.3 IBM TRIRIGA Application Platform version 8 Description The issue involves multiple cross-site scripting XSS vulnerabilities that allow remote attackers to inject arbitrary we...

CVE-2012-5948: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3, and 8, allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 WebProcess.srv, 2 the html/en/default/ directory, 3 Widget/resource, 4 birt/frameset, or 5...