Login Request a demo
JA
Product
Jboss Application Server
by Redhat · last CVE Mar 10, 2020
5
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jboss Application Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2012-2312
7.8
0%
Dec 18
An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, A threat gets reused from the thread…
Affected: 7.1.0; 7.1.1
CVE-2012-1094
7.5
1%
Mar 10
JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be…
Affected: 7.0.0 before 7.1.1
CVE-2013-3734
6.6
2%
Oct 24
The Embedded Jopr component in JBoss Application Server includes the cleartext datasource password in unspecified HTML responses, which might allow (1) man-in-the-middle attackers…
Affected: through 1.2
CVE-2011-3609
6.5
1%
Nov 26
A CSRF issue was found in JBoss Application Server 7 before 7.1.0
Affected: 7.0.0; 7.0.0; 7.0.0; 7.0.0; 7.0.0; 7.0.0; +2 more
CVE-2011-3606
5.4
1%
Nov 26
A DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0 Beta 1 administration console
Affected: 7.0.0; 7.0.0; 7.0.0; 7.0.0; 7.0.0; 7.0.0; +2 more
Showing 5