Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

redhat jboss enterprise application platform - vulnerabilities and exploits

(subscribe to this query)
5.8
CVSSv2

CVE-2012-4549

The processInvocation function in org.jboss.as.ejb3.security.AuthorizationInterceptor in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) prior to 6.0.1, authorizes all requests when no roles are allowed for an Enterprise Java Beans (EJB) method invocation, which al...
Redhat Jboss Enterprise Application PlatformRedhat Jboss Enterprise Application Platform 4.2.0Redhat Jboss Enterprise Application Platform 4.3.0Redhat Jboss Enterprise Application Platform 5.0.0Redhat Jboss Enterprise Application Platform 5.0.1Redhat Jboss Enterprise Application Platform 5.1.0Redhat Jboss Enterprise Application Platform 5.1.1Redhat Jboss Enterprise Application Platform 5.1.2Redhat Jboss Enterprise Application Platform 5.2.0Redhat Jboss Enterprise Application Platform 5.2.1Redhat Jboss Enterprise Application Platform 5.2.2
4
CVSSv2

CVE-2014-7849

The Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP) 6.2.0 up to and including 6.3.2 does not properly verify authorization conditions, which allows remote authenticated users to add, modify, and undefine otherwise restricted attribut...
Redhat Jboss Enterprise Application Platform 6.2.0Redhat Jboss Enterprise Application Platform 6.2.1Redhat Jboss Enterprise Application Platform 6.2.2Redhat Jboss Enterprise Application Platform 6.2.3Redhat Jboss Enterprise Application Platform 6.2.4Redhat Jboss Enterprise Application Platform 6.3.0Redhat Jboss Enterprise Application Platform 6.3.1Redhat Jboss Enterprise Application Platform 6.3.2
9.8
CVSSv3

CVE-2016-3690

The PooledInvokerServlet in JBoss EAP 4.x and 5.x allows remote malicious users to execute arbitrary code via a crafted serialized payload.
Redhat Jboss Enterprise Application Platform 4.2.0Redhat Jboss Enterprise Application Platform 4.3.0Redhat Jboss Enterprise Application Platform 5.0.0Redhat Jboss Enterprise Application Platform 5.1.0Redhat Jboss Enterprise Application Platform 5.1.1Redhat Jboss Enterprise Application Platform 5.1.2Redhat Jboss Enterprise Application Platform 5.2.0
5
CVSSv2

CVE-2010-1429

Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 prior to 4.2.0.CP09 and 4.3 prior to 4.3.0.CP08 allows remote malicious users to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by...
Redhat Jboss Enterprise Application PlatformRedhat Jboss Enterprise Application Platform 4.2Redhat Jboss Enterprise Application Platform 4.2.0Redhat Jboss Enterprise Application Platform 4.3Redhat Jboss Enterprise Application Platform 4.3.0
4.3
CVSSv2

CVE-2009-2405

Multiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2.0 prior to 4.2.0.CP08, 4.2.2GA, 4.3 prior to 4.3.0.CP07, and 5.1.0GA allow remote malicious users to inje...
Redhat Jboss Enterprise Application Platform 4.2Redhat Jboss Enterprise Application Platform 4.2.0Redhat Jboss Enterprise Application Platform 4.2.2Redhat Jboss Enterprise Application Platform 4.3Redhat Jboss Enterprise Application Platform 4.3.0Redhat Jboss Enterprise Application Platform 5.1.0
6.8
CVSSv2

CVE-2011-4085

The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform prior to 5.1.2, SOA Platform prior to 5.2.0, BRMS Platform prior to 5.3.0, and Portal Platform prior to 4.3 CP07 perform access control only for the GET and POST methods, which allow remote malicious ...
Redhat Jboss Enterprise Application PlatformRedhat Jboss Enterprise Application Platform 4.2.0Redhat Jboss Enterprise Application Platform 4.3.0Redhat Jboss Enterprise Application Platform 5.0.0Redhat Jboss Enterprise Application Platform 5.0.1Redhat Jboss Enterprise Application Platform 5.1.0Redhat Jboss Enterprise Soa PlatformRedhat Jboss Enterprise Soa Platform 4.2.0Redhat Jboss Enterprise Soa Platform 4.3.0Redhat Jboss Enterprise Soa Platform 5.0.0Redhat Jboss Enterprise Soa Platform 5.0.1Redhat Jboss Enterprise Soa Platform 5.0.2
4.3
CVSSv2

CVE-2009-1380

Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 prior to 4.2.0.CP08 and 4.3 prior to 4.3.0.CP07 allows remote malicious users to inject arbitrary web script or HTML via the filter par...
Redhat Jboss Enterprise Application Platform 4.2Redhat Jboss Enterprise Application Platform 4.2.0Redhat Jboss Enterprise Application Platform 4.3Redhat Jboss Enterprise Application Platform 4.3.0
6.5
CVSSv3

CVE-2017-2595

It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal.
Redhat Jboss Enterprise Application Platform 6.0.0Redhat Jboss Enterprise Application Platform 6.4.0Redhat Jboss Enterprise Application Platform 7.0.0Redhat Jboss Enterprise Application Platform 7.1.0
4.6
CVSSv2

CVE-2012-1167

The JBoss Server in JBoss Enterprise Application Platform 5.1.x prior to 5.1.2 and 5.2.x prior to 5.2.2, Web Platform prior to 5.1.2, BRMS Platform prior to 5.3.0, and SOA Platform prior to 5.3.0, when the server is configured to use the JaccAuthorizationRealm and the ignoreBaseD...
Redhat Jboss Enterprise Application Platform 5.1.0Redhat Jboss Enterprise Application Platform 5.1.1Redhat Jboss Enterprise Application Platform 5.2.0Redhat Jboss Enterprise Application Platform 5.2.1Redhat Jboss Enterprise Brms PlatformRedhat Jboss Enterprise Soa PlatformRedhat Jboss Enterprise Soa Platform 5.0.0Redhat Jboss Enterprise Soa Platform 5.0.1Redhat Jboss Enterprise Soa Platform 5.0.2Redhat Jboss Enterprise Soa Platform 5.1.0Redhat Jboss Enterprise Soa Platform 5.1.1Redhat Jboss Enterprise Web Platform
6.5
CVSSv3

CVE-2017-2582

It was found that while parsing the SAML messages the StaxParserUtil class of keycloak prior to 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an malicious user to determine values of system properties at the attacked system b...
Redhat KeycloakRedhat Jboss Enterprise Application Platform 6.0.0Redhat Jboss Enterprise Application Platform 6.4.0Redhat Jboss Enterprise Application Platform 7.0.0Redhat Jboss Enterprise Application Platform 7.1.0
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-21317CVE-2025-23940buffer overflowCVE-2025-21335CVE-2025-23860CVE-2024-57704SSTIwirelessCVE-2019-3309
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook