JE
Product
Jboss Enterprise Application Platform
On CISA KEVExploited in the wildRansomware-linked
241
CVEs
5
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 36High 76Medium 60Low 1
Watch
Add Jboss Enterprise Application Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6311 | 5.3 | Aug 22 | Get requests in JBoss Enterprise Application Platform (EAP) 7 disclose internal IP addresses to remote attackers Affected: 7.0 |
| CVE-2012-4550 | 5.3 | Jan 5 | A flaw was found in JBoss Enterprise Application Platform Affected: 6.0.0 |
| CVE-2022-2764 | 4.9 | Sep 1 | A flaw was found in Undertow Affected: 7.0.0 |
| CVE-2019-14838 | 4.9 | Oct 14 | A flaw was found in wildfly-core before 7.2.5.GA Affected: 7.2.0; 7.2.5; 7.3.0; 7.2.4 |
| CVE-2021-3536 | 4.8 | May 20 | A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field,… Affected: 7.0 |
| CVE-2020-10687 | 4.8 | Sep 23 | A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to… Affected: 7.2; 7.3; 7.4; 7.3 |
| CVE-2019-3805 | 4.7 | May 3 | A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system Affected: 6.0.0; 7.0.0 |
| CVE-2019-14885 | 4.3 | Jan 23 | A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA Affected: before 7.2.6; 7.2.6 |
| CVE-2019-14820 | 4.3 | Jan 8 | It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterConstants, which can be invoked via a specially-crafted URL Affected: 6.4.0; 7.2.0 |
| CVE-2020-1732 | 4.2 | May 4 | A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently causing security identity corruption across concurrent threads when using EE… Affected: 7.0.0 |