VulnCheck KEV: CVE-2011-2908

Cross-site request forgery CSRF vulnerability in the JMX Console jmx-console in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that...

VulnCheck KEV: CVE-2012-3347

AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment...

VulnCheck KEV: CVE-2010-1428

Unauthenticated access to the JBoss Application Server Web Console /web-console is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this flaw to gain access to sensitive information...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.6 OpenSSL security update

Updated packages that fix several OpenSSL security issues are available for Red Hat JBoss Enterprise Application Platform 6.4.6 for Microsoft Windows and Solaris. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base...

用友PDM Professional-Jboss配置不当导致代码执行

No description provided by source...

Important: Red Hat Security Advisory: Red Hat JBoss Web Server 3.0.2 OpenSSL Security Update

Updated packages that fix several OpenSSL security issues are available for Red Hat JBoss Web Server 3.0.2 for Microsoft Windows and Solaris. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

Important: Red Hat Security Advisory: Red Hat JBoss Web Server 2.1.0 OpenSSL security update

Updated packages that fix several OpenSSL security issues are available for Red Hat JBoss Web Server 2.1.0 for Microsoft Windows and Solaris. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detail...

PT-2018-5108 · Xmlsoft +3 · Libxml2 +3

Name of the Vulnerable Software and Affected Versions: Red Hat JBoss Core Services affected versions not specified Description: A regression issue was discovered in libxml2, which makes it vulnerable to a Denial of Service DoS attack due to a stack overflow. This issue is related to a previous...

Moderate: Red Hat Security Advisory: Red Hat JBoss Fuse 6.2.1 update

Red Hat JBoss Fuse 6.2.1 Rollup Patch 1, which fixes one security issue and includes several bug fixes and various enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring...

RHEL 6 : JBoss EAP (RHSA-2016:0122)

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.4.6, fix several bugs, add various enhancements, and resolve one security issue are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A...

RHEL 5 : JBoss EAP (RHSA-2016:0121)

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.4.6, fix several bugs, add various enhancements, and resolve one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A...

RHEL 6 : jboss-ec2-eap (RHSA-2016:0124)

Updated jboss-ec2-eap packages that add one enhancement and resolve one security issue are now available for Red Hat JBoss Enterprise Application Platform 6.4.6 on Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerabilit...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.6 update on RHEL 5

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.4.6, fix several bugs, add various enhancements, and resolve one security issue are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.6 update on RHEL 6

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.4.6, fix several bugs, add various enhancements, and resolve one security issue are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.6 update on RHEL 7

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.4.6, fix several bugs, add various enhancements, and resolve one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A...

Important: Red Hat Security Advisory: jboss-ec2-eap security and enhancement update for EAP 6.4.6

Updated jboss-ec2-eap packages that add one enhancement and resolve one security issue are now available for Red Hat JBoss Enterprise Application Platform 6.4.6 on Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerabilit...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.6 update

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.4.6, fix several bugs, add various enhancements, and resolve one security issue are now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. A...

Critical: Red Hat Security Advisory: Red Hat JBoss Operations Network 3.3.5 update

Red Hat JBoss Operations Network 3.3 update 5, which fixes two security issues and several bugs, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives...

Low: Red Hat Bug Fix Advisory: Red Hat JBoss Web Server 2.1.0 tomcat7 update

An update for the Apache Tomcat 7 component for Red Hat JBoss Web Server 2.1.0 is now available from the Red Hat Customer Portal for Red Hat Enterprise Linux 5 and 7 Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised o...

PayPal Java Serialization Vulnerability

A Java serialization vulnerability disclosed more than a year ago figured to have a long shelf life. It lived in popular Java application development frameworks such as Apache Commons Collections—where it’s been patched—and not to mention widely deployed application servers such as Oracle WebLogi...