Published: 23/12/2021 Updated: 07/01/2022

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 7.2 | Impact Score: 5.9 | Exploitability Score: 1.2

VMScore: 578

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

Subscribe to Jboss Enterprise Application Platform

The HornetQ component of Artemis in EAP 7 was not updated with the fix for CVE-2016-4978. A remote attacker could use this flaw to execute arbitrary code with the permissions of the application using a JMS ObjectMessage.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat jboss enterprise application platform 7.3.9
redhat jboss enterprise application platform 7.4.0

Synopsis Important: Red Hat JBoss Enterprise Application Platform 743 security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic A security update is now available for Red Hat JBoss Enterprise Application Platform ...

Synopsis Important: Red Hat JBoss Enterprise Application Platform 743 security update Type/Severity Security Advisory: Important Topic A security update is now available for Red Hat JBoss Enterprise Application Platform 74Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scorin ...

Synopsis Important: Red Hat JBoss Enterprise Application Platform 743 security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic A security update is now available for Red Hat JBoss Enterprise Application Platform ...

No description is available for this CVE ...

CWE-502 https://bugzilla.redhat.com/show_bug.cgi?id=2010559 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2022:0401 https://access.redhat.com/security/cve/cve-2021-20318

CVE-2021-20318

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect