40 matches found
Important: Red Hat Security Advisory: JBoss Enterprise Portal Platform 5.2.2 security update
An update for the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 that fixes two security issues is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...
CVE-2011-4580
Multiple cross-site scripting XSS vulnerabilities in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-2941
Open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the initialURI parameter...
CVE-2011-4580
CVE-2011-4580 affects Red Hat JBoss Enterprise Portal Platform prior to 5.2.0. The issue is multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, potentially leading to script execution in the victim’s portal session. The provided...
CVE-2011-2941
The CVE-2011-2941 entry describes an open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0. The flaw allows remote attackers to redirect users to arbitrary websites and conduct phishing via a URL supplied in the initialURI parameter. Affected product is JBoss Enterp...
CVE-2011-4580: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-2941: Improper Input Validation
Open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the initialURI parameter...
JBoss Enterprise Portal GateIn Portal XML解析任意文件读取漏洞
CVE ID:CVE-2013-0315 JBoss Enterprise Portal Platform是一款构建和管理动态网站的平台。 JBoss Enterprise Portal Platform GateIn Portal export/import gadget存在一个漏洞可导致XML外部实体攻击。如果提供给import gadget的XML包含外部XML实体，此实体会被解析，可访问import gadget的远程攻击者可以利用此漏洞以运行应用服务器上下文读取任意文件。 0 JBoss Enterprise Portal Platform 5.2.2 厂商解决方案...
JBoss Enterprise Portal GateIn Portal未验证站点导入漏洞
CVE ID:CVE-2013-0314 JBoss Enterprise Portal Platform是一款构建和管理动态网站的平台。 JBoss Enterprise Portal Platform GateIn Portal export/import gadget在导入Zip文件时没有正确检查验证，允许远程攻击者利用漏洞修改站点内容，删除站点，或修改应用在站点portlet中的访问控制。 0 JBoss Enterprise Portal Platform 5.2.2 厂商解决方案 用户可参考如下厂商提供的安全公告获得补丁信息：...
CVE-2013-0314
The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows remote attackers to modify site contents, remove the site, or alter the access controls for portlets...
CVE-2012-3532
Cross-site request forgery CSRF vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2012-3532
CVE-2012-3532 is a CSRF vulnerability in the GateIn Portal component of JBoss Enterprise Portal Platform 5.2.2 and earlier. The issue could allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, with potential partial confidentiality, integrity, and availa...
CVE-2012-3532
Cross-site request forgery CSRF vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2013-0315
The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 is vulnerable to an XML External Entity (XXE) attack via a crafted external XML entity in an XML document, enabling remote attackers to read arbitrary files on the server. Root cause: improper XML parsing in the Gate...
CVE-2013-0315: Undefined Security Weakness
The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote attackers to read arbitrary files via a crafted external XML entity in an XML document, aka an XML Entity Expansion XEE attack...
CVE-2012-3532: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2013-0314: Improper Authentication
The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows remote attackers to modify site contents, remove the site, or alter the access controls for portlets...
PT-2013-2226
Name of the Vulnerable Software and Affected Versions JBoss Enterprise Portal Platform version 5.2.2 Description The issue concerns the GateIn Portal export/import gadget, which fails to properly check authentication when importing Zip files. This allows remote attackers to modify site contents,...
Moderate: Red Hat Security Advisory: JBoss Enterprise Portal Platform 5.2.2 security update
An update for the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 that fixes multiple security issues is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring...
Important: Red Hat Security Advisory: JBoss Web Services security update
An update for the JBoss Web Services component in JBoss Enterprise SOA Platform 4.3 CP05 and JBoss Enterprise Portal Platform 4.3 CP07 which fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important...