JE
Product
Jboss Enterprise Web Server
On CISA KEVExploited in the wildRansomware-linked
35
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 16Medium 5Low 1
Watch
Add Jboss Enterprise Web Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-1559 | 5.9 | Feb 27 | 0-byte record padding oracle Affected: 5.0.0 |
| CVE-2018-1304 | 5.9 | Feb 28 | The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49… Affected: 3.0.0 |
| CVE-2016-0762 | 5.9 | Aug 10 | The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 did not process the supplied… Affected: 3.0.0 |
| CVE-2016-6794 | 5.3 | Aug 10 | When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager Affected: 3.0.0 |
| CVE-2014-3655 | 4.3 | Nov 13 | JBoss KeyCloak is vulnerable to soft token deletion via CSRF Affected: 1.0.0 |
Showing 5