Red Hat / Jboss Enterprise Soa Platform
17 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2011-2487 | jbossws: Prone to Bleichenbacher attack against to be distributed symmetric key | MEDIUM | 5.9 | Mar 11, 2020 |
| CVE-2015-7501 | apache-commons-collections: InvokerTransformer code execution during deserialisation | CRITICAL | 9.8 | Nov 9, 2017 |
| CVE-2014-3518 | 5: Remote code execution via unauthenticated JMX/RMI connector | MEDIUM | 6.8 | Jul 22, 2014 |
| CVE-2013-4210 | Remoting: DoS by file descriptor exhaustion | MEDIUM | 5.0 | Oct 1, 2013 |
| CVE-2012-5575 | apache-cxf: XML encryption backwards compatibility attacks | MEDIUM | 6.4 | Aug 19, 2013 |
| CVE-2011-1483 | JBossWS remote Denial of Service | MEDIUM | 5.0 | Jul 28, 2013 |
| CVE-2013-2165 | RichFaces: Remote code execution due to insecure deserialization | HIGH | 7.5 | Jul 22, 2013 |
| CVE-2012-2377 | JGroups diagnostics service enabled by default with no authentication when a JGroups channel is started | LOW | 3.3 | Nov 23, 2012 |
| CVE-2012-1167 | JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealm | MEDIUM | 4.6 | Nov 23, 2012 |
| CVE-2011-4605 | JNDI: unauthenticated remote write access is permitted by default | HIGH | 7.5 | Nov 23, 2012 |
| CVE-2011-4085 | Invoker servlets authentication bypass (HTTP verb tampering) | MEDIUM | 6.8 | Nov 23, 2012 |
| CVE-2011-2908 | CSRF on jmx-console allows invocation of operations on mbeans | MEDIUM | 6.0 | Nov 23, 2012 |
| CVE-2011-2196 | JBoss Seam EL interpolation in exception handling | MEDIUM | 6.8 | Jul 27, 2011 |
| CVE-2011-1484 | JBoss Seam privilege escalation caused by EL interpolation in FacesMessages | MEDIUM | 6.8 | Jul 27, 2011 |
| CVE-2010-3708 | JBoss drools deserialization remote code execution | HIGH | 7.5 | Dec 30, 2010 |
| CVE-2010-2493 | JBoss SOA Platform web application authentication bypass | MEDIUM | 5.0 | Aug 9, 2010 |
| CVE-2010-2474 | JBoss ESB privilege escalation in cross-domain contexts | LOW | 3.5 | Aug 9, 2010 |
Showing 1 to 17 of 17 CVEs