Red Hat JBoss - Web/JMX Console Access

Red Hat JBoss Enterprise Application Platform EAP can expose the Web Console, JMX Console, and JMXInvokerServlet without authentication, allowing remote attackers to reach admin dashboards and interact with MBeans, leading to full server compromise. id: CVE-2010-1428 info: name: Red Hat JBoss -...

JBoss JMX/Web Console - Authentication Bypass via HTTP Verb Tampering

JBoss EAP 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 only enforce authentication for GET/POST on the JMX and Web consoles because the web.xml security-constraint enumerates only those verbs in . Non-standard verbs such as HEAD skip the constraint, granting unauthenticated access to MBean...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.26 Security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.26 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.26 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.26 Security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 9 : Red Hat JBoss Enterprise Application Platform 7.4.26 (RHSA-2026:99099)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:99099 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release ...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.26 Security update (Important) (RHSA-2026:99097)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:99097 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release ...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.26 (RHSA-2026:99098)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:99098 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release ...

RHEL 10 / 8 / 9 : Red Hat JBoss Enterprise Application Platform 8.1.9 (RHSA-2026:99018)

The remote Redhat Enterprise Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:99018 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This...

IBM TRIRIGA Application Platform code injection vulnerability

IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.9 contain a code injection vulnerability. This vulnerability stems from improper handling of special elements within OS commands, potentially allowing remote authenticated attackers to execute arbitrary code...

VulnCheck KEV: CVE-2013-2165

ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBo...

CVE-2026-110273: IBM TRIRIGA Application Platform: IBM TRIRIGA Application Platform 5.0.0 through 5.0.9 IBM TRIRIGA could allow a remote authenticated attacker to execute…

IBM TRIRIGA Application Platform 5.0.0 through 5.0.9 IBM TRIRIGA could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.9 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Security Bulletin: Security Vulnerability identified in IBM TRIRIGA - Command Execution

Summary IBM TRIRIGA is affected by a security vulnerability related to imporper handling of OS command inputs which could allow arbitrary code execution. Vulnerability Details CVEID:CVE-2026-110273 DESCRIPTION: IBM TRIRIGA could allow a remote authenticated attacker to execute arbitrary code due ...

Red Hat JBoss Enterprise Application Platform authorization issue vulnerability

Red Hat JBoss Enterprise Application Platform versions 7 and 8 contain an authorization issue vulnerability. This vulnerability arises because the handler for read-resource operations within the runtime management resources of the platform-mbean component fails to perform the required role-based...

RHEL 8 : Red Hat JBoss Enterprise Application Platform 8.1.9 (RHSA-2026:92057)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:92057 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This release ...

Vulnerability related to the software supply chain issue in Red Hat JBoss Enterprise Application Platform

Red Hat JBoss Enterprise Application Platform versions 7 and 8 contain a vulnerability related to the software supply chain. This vulnerability arises because the Wildfly IIOP listener permits deserialization of input streams prior to authentication, potentially allowing attackers to access the...