Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

jboss enterprise soa platform vulnerabilities and exploits

(subscribe to this query)
6
CVSSv2
CVE-2011-2908
Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise Portal Platform prior to 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users...
Redhat Jboss Enterprise Portal Platform 5.0.0Redhat Jboss Enterprise Portal Platform 5.1.1Redhat Jboss Enterprise Portal Platform 5.1.0Redhat Jboss Enterprise Portal PlatformRedhat Jboss Enterprise Brms Platform 5.3.0Redhat Jboss Enterprise Portal Platform 5.2.0Redhat Jboss Enterprise Soa Platform 5.3.0Redhat Jboss Enterprise Portal Platform 5.0.1
6.8
CVSSv2
CVE-2011-2196
jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and previous versions, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5...
Redhat Jboss Seam 2 Framework 2.1.2Redhat Jboss Seam 2 FrameworkRedhat Jboss Seam 2 Framework 2.0.0Redhat Jboss Seam 2 Framework 2.2.0Redhat Jboss Seam 2 Framework 2.0.2Redhat Jboss Enterprise Application Platform 4.3.0Redhat Jboss Seam 2 Framework 2.1.0Redhat Jboss Enterprise Application Platform 5.1.1Redhat Jboss Enterprise Soa Platform 5.1.0Redhat Jboss Seam 2 Framework 2.0.1Redhat Jboss Seam 2 Framework 2.1.1Redhat Jboss Seam 2 Framework 2.2.1Redhat Jboss Seam 2 Framework 2.0.3Redhat Jboss Enterprise Soa Platform 4.3.0Redhat Jboss Enterprise Web Platform 5.1.1
6.8
CVSSv2
CVE-2011-1484
jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and previous versions, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP04 and 5.1.0 and JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0.CP09 and 5.1.0, does not properly restrict use of Expres...
Redhat Jboss Seam 2 FrameworkRedhat Jboss Seam 2 Framework 2.2.1Redhat Jboss Seam 2 Framework 2.1.2Redhat Jboss Seam 2 Framework 2.0.0Redhat Jboss Seam 2 Framework 2.0.2Redhat Jboss Seam 2 Framework 2.1.1Redhat Jboss Enterprise Soa Platform 4.3.0Redhat Jboss Seam 2 Framework 2.2.0Redhat Jboss Seam 2 Framework 2.1.0Redhat Jboss Enterprise Application Platform 5.1.0Redhat Jboss Enterprise Application Platform 4.3.0Redhat Jboss Seam 2 Framework 2.0.1Redhat Jboss Enterprise Soa Platform 5.1.0Redhat Jboss Seam 2 Framework 2.0.3
2.1
CVSSv2
CVE-2012-0034
The NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0, Web Platform (EWP) 5.1.2 and 5.2.0, and BRMS Platform prior to 5.3.1 logs the username and password in cleartext when an exception is thrown, which allows local users to obtain sensiti...
Redhat Jboss Enterprise Application Platform 5.1.2Redhat Jboss Enterprise Application Platform 5.2.0Redhat Jboss Enterprise Web Platform 5.2.0Redhat Jboss Enterprise Web Platform 5.1.2Redhat Jboss Enterprise Brms Platform
7.5
CVSSv2
CVE-2012-5629
The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and 6.0.1, and Enterprise Web Platform (EWP) 5.2.0 allow remote malicious users to bypass authentication via an empty password...
Redhat Jboss Enterprise Web Platform 5.2.0Redhat Jboss Enterprise Application Platform 6.0.1Redhat Jboss Enterprise Application Platform 4.3.0Redhat Jboss Enterprise Application Platform 5.2.0
4.3
CVSSv2
CVE-2011-4575
Cross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application Platform (EAP) prior to 5.2.0, Web Platform (EWP) prior to 5.2.0, BRMS Platform prior to 5.3.1, and SOA Platform prior to 5.3.1 allows remote malicious users to inject arbitrary web script...
Redhat Jboss Enterprise Web Platform 5.2.0Redhat Jboss Enterprise Application Platform 5.2.0Redhat Jboss Enterprise Brms Platform
4.9
CVSSv2
CVE-2012-5478
The AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) prior to 5.2.0, Web Platform (EWP) prior to 5.2.0, BRMS Platform prior to 5.3.1, and SOA Platform prior to 5.3.1 does not properly restrict access, which allows remote authenticated users to bypass intend...
Redhat Jboss Enterprise Application Platform 5.2.0Redhat Jboss Enterprise Web Platform 5.2.0Redhat Jboss Enterprise Brms Platform
4
CVSSv2
CVE-2012-3369
The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) prior to 5.2.0, Web Platform (EWP) prior to 5.2.0, BRMS Platform prior to 5.3.1, and SOA Platform prior to 5.3.1 allows remote malicious users to gain privileges of the previous user via a null password,...
Redhat Jboss Enterprise Web Platform 5.2.0Redhat Jboss Enterprise Application Platform 5.2.0Redhat Jboss Enterprise Brms Platform
5.8
CVSSv2
CVE-2012-3370
The SecurityAssociation.getCredential method in JBoss Enterprise Application Platform (EAP) prior to 5.2.0, Web Platform (EWP) prior to 5.2.0, BRMS Platform prior to 5.3.1, and SOA Platform prior to 5.3.1 returns the credentials of the previous user when a security context is not...
Redhat Jboss Enterprise Application Platform 5.2.0Redhat Jboss Enterprise Web Platform 5.2.0Redhat Jboss Enterprise Brms Platform
6.8
CVSSv2
CVE-2012-0874
The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise Application Platform (EAP) prior to 5.2.0, Web Platform (EWP) prior to 5.2.0, BRMS Platform prior to 5.3.1, and SOA Platform prior to 5.3.1 do not require authentication by default in cer...
Redhat Jboss Enterprise Application Platform 5.2.0Redhat Jboss Enterprise Web Platform 5.2.0Redhat Jboss Enterprise Brms Platform
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook