Lucene search
+L

6 matches found

CNVD
CNVD
•added 2015/07/23 12:00 a.m.•17 views

Red Hat JBoss Portal Information Disclosure Vulnerability

Red Hat JBoss Portal is an open source and standards-compliant portal platform from Red Hat Red Hat. The platform can build , layout of a portal Web interface for publishing , managing content and customizing the user experience. A security vulnerability exists in Portlet Bridge for JavaServer...

4.9CVSS6.6AI score0.01496EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2015/07/22 12:00 a.m.•33 views

Oracle WebCenter Portal Multiple Vulnerabilities (July 2015 CPU)

Binary data oraclewebcenterportaljuly2015cpu.nbin...

5.5CVSS6.4AI score0.01764EPSS
SaveExploits0References3
Prion
Prion
•added 2015/07/16 11:00 a.m.•36 views

Design/Logic Flaw

The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with the default resource serving for GenericPortlet, does not properly restrict access to restricted resources, which allows remote attackers to obtain sensitive information via a URL with a modified...

4.9CVSS6.6AI score0.01496EPSS
SaveExploits0References4Affected Software1
CVE
CVE
•added 2015/07/16 10:00 a.m.•73 views

CVE-2015-3244

The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used with GenericPortlet's default resource serving, does not properly restrict access to restricted resources, enabling remote attackers to obtain sensitive information via a URL with a modified resource ID. Affected pro...

4.9CVSS6.2AI score0.01496EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2015/07/16 10:00 a.m.•50 views

CVE-2015-3244

The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with the default resource serving for GenericPortlet, does not properly restrict access to restricted resources, which allows remote attackers to obtain sensitive information via a URL with a modified...

6.1AI score0.01496EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/07/16 12:00 a.m.•2 views

CVE-2015-3244: Undefined Security Weakness

The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with the default resource serving for GenericPortlet, does not properly restrict access to restricted resources, which allows remote attackers to obtain sensitive information via a URL with a modified...

4.9CVSS5.8AI score0.01496EPSS
SaveExploits0References2
Rows per page
Query Builder