Unscored severity · published Jul 21, 2006
CVE-2006-3733
jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1,…
–
CVSS
12%
EPSS
No
On KEV
Description
jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allows remote attackers to gain privileges as the CS-MARS administrator and execute arbitrary Java code via an invokeOp action in the BSHDeployer jboss.scripts service name.
Exploitation
Is it being used?
Exploit prediction (EPSS)12.0% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SM
Security Monitoring Analysis And Response System · Cisco
4.2.0 · source: NVD
Affected product
SM
Security Monitoring Analysis And Response System
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3733
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3733
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0424.html
Vendor Advisory
http://secunia.com/advisories/21118
securitytracker.com
http://securitytracker.com/id?1016537
Patch
http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml
www.osvdb.org
http://www.osvdb.org/27419
www.securityfocus.com
http://www.securityfocus.com/archive/1/440641/100/100/threaded
More from Security Monitoring Analysis And Response System
–
CVE-2013-5563
Cross-site scripting (XSS) vulnerability in Query/NewQueryResult.jsp in Cisco Security Monitoring, Analysis and Response System (CS-MARS) allows remote attackers to inject…
–
CVE-2013-1140
The XML parser in Cisco Security Monitoring, Analysis, and Response System (MARS) allows remote attackers to read arbitrary files via an external entity declaration in conjunction…
–
CVE-2007-0397
The Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do not validate the SSL/TLS…