Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.11 update

An update is now available for Red Hat JBoss Enterprise Application Platform from the Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

SQL Injection Vulnerability in Groupid Parameter of EAP Digital Campus Integration Management Platform of Guangzhou Zhongda Dongri Education Technology Co.

EAP platform, abbreviated as EAP Enterprise Application Platform, enterprise application platform, also known as enterprise management software platform, is a highly open, integrated with a number of enterprise management software modules. Ltd. EAP digital campus integrated management platform...

SQL Injection Vulnerability in bjbh Parameter of EAP Digital Campus Integration Management Platform of Guangzhou Zhongda Dongri Education Technology Co.

EAP platform, abbreviated as EAP Enterprise Application Platform, enterprise application platform, also known as enterprise management software platform, is a highly open, integrated with a number of enterprise management software modules. Guangzhou CUHK Dongri Education Technology Co., Ltd. EAP...

CVE-2016-7065

The JMX servlet in Red Hat JBoss Enterprise Application Platform EAP 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object...

CVE-2016-7065: Deserialization of Untrusted Data

The JMX servlet in Red Hat JBoss Enterprise Application Platform EAP 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object...

PT-2016-7197

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform EAP versions 4 and 5 Description The issue allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object. This is related t...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.10 update

An update is now available for Red Hat JBoss Enterprise Application Platform. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2016-7046

Red Hat JBoss Enterprise Application Platform EAP 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service CPU and disk consumption via a long URL...

CVE-2016-7046

Red Hat JBoss Enterprise Application Platform EAP 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service CPU and disk consumption via a long URL...

CVE-2016-7046: Undefined Security Weakness

Red Hat JBoss Enterprise Application Platform EAP 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service CPU and disk consumption via a long URL...

PT-2016-7195

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform EAP version 7 Description The issue allows remote attackers to cause a denial of service, consuming CPU and disk resources, by sending a long URL when the platform operates as a reverse-proxy with...

CVE-2016-5406: Undefined Security Weakness

The domain controller in Red Hat JBoss Enterprise Application Platform EAP 7.x before 7.0.2 allows remote authenticated users to gain privileges by leveraging failure to propagate administrative RBAC configuration to all slaves...

PT-2016-6208

Name of the Vulnerable Software and Affected Versions WildFly version 10.0.0 Red Hat JBoss Enterprise Application Platform EAP versions prior to 7.0.2 Description A CRLF injection issue in the Undertow web server allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response...

PT-2016-6411

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform EAP versions prior to 7.0.2 Description The issue concerns the domain controller in Red Hat JBoss Enterprise Application Platform EAP, where remote authenticated users can gain privileges. This is...

Important: Red Hat Security Advisory: JBoss Enterprise Application Platform 7.0.2 for RHEL 7

Updated packages that provide Red Hat JBoss Enterprise Application Platform 7.0.2, fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scori...

Tryton Information Disclosure Vulnerability

Tryton is a set of general-purpose application platform based on Python and PostgreSQL. It is an independent branch project of OpenERP Enterprise Resource Planning ERP and Customer Relationship Management CRM system, which contains modules for financial management, marketing management, customer...

Buffer overflow vulnerability in multiple Huawei products (CNVD-2016-06332)

The Huawei USG5500, USG2100, USG2200, and USG5100 are firewall products from Huawei China. A buffer overflow vulnerability exists in multiple Huawei products, which stems from the program failing to perform proper boundary checks on user-submitted input. A remote attacker could exploit the...

New too openEAP enterprise application platform without the log file upload vulnerability

No description provided by source...

IBM TRIRIGA Application Platform Cross-Site Scripting Vulnerability (CNVD-2016-05021)

IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. A cross-site scripting vulnerability exists in IBM TRIRIGA Application Platform, which can be exploited by an attacker to inject arbitrary Web script or HTML...

CVE-2016-0387

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2883...