JO
Product
Jboss Operations Network
24
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 2Low 0
Watch
Add Jboss Operations Network to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-7501 | 9.8 | Nov 9 | Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x;… Affected: 3.0 |
| CVE-2016-6330 | 9.8 | Sep 27 | The server in Red Hat JBoss Operations Network (JON), when SSL authentication is not configured for JON server / agent communication, allows remote attackers to execute arbitrary… Affected: 3.0; 3.0.1; 3.1; 3.1.1; 3.1.2; 3.1.4; +10 more |
| CVE-2016-3737 | 9.8 | Aug 2 | The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization Affected: through 3.3.5 |
| CVE-2016-5422 | 8.8 | Sep 7 | The web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote… Affected: through 3.3.6 |
| CVE-2010-0737 | 8.0 | Oct 30 | A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permissions, which allows JBoss ON users to perform management… Affected: before 2.3.1 |
| CVE-2021-4104 | 7.5 | Dec 14 | JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration Affected: 3.0 |
| CVE-2012-5626 | 7.5 | Jan 23 | EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform… Affected: 3.1 |
| CVE-2019-3834 | 7.3 | Oct 3 | It was found that the fix for CVE-2014-0114 had been reverted in JBoss Operations Network 3 (JON) Affected: after 3.2.1 before 3.3.11 |
| CVE-2013-4374 | 7.1 | Nov 4 | An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files Affected: 3.1 |
| CVE-2008-5083 | 6.5 | Nov 8 | In JON 2.1.x before 2.1.2 SP1, users can obtain unauthorized security information about private resources managed by JBoss ON Affected: 2.1.0 before 2.1.2; 2.1.2 |
| CVE-2020-14340 | 5.9 | Jun 2 | A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles Affected: 3.0 |
| CVE-2015-3267 | – | Aug 11 | Cross-site scripting (XSS) vulnerability in the 404 error page in Red Hat JBoss Operations Network before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via… Affected: through 3.3.2 |
| CVE-2015-0297 | – | Apr 24 | Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the (1)… Affected: 3.3.1 |
| CVE-2014-7853 | – | Feb 13 | The JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application Platform (EAP) before 6.3.3 does not properly assign socket-binding-ref sensitivity… Affected: 3.3.1 |
| CVE-2012-0032 | – | Apr 1 | Red Hat JBoss Operations Network (JON) before 3.0.1 uses 0777 permissions for the root directory when installing a remote client, which allows local users to read or modify… Affected: through 3.0 |
| CVE-2011-4573 | – | Apr 1 | Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration… Affected: through 2.4.1; 1.0.0; 2.0.0; 2.0.1; 2.1.0; 2.2; +3 more |
| CVE-2012-1100 | – | Feb 14 | Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote… Affected: through 2.4.1; 2.0.0; 2.0.1; 2.1.0; 2.2; 2.3; +3 more |
| CVE-2012-0062 | – | Feb 14 | Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 allows remote attackers to hijack agent sessions via an agent registration request without a security… Affected: through 2.4.1; 2.0.0; 2.0.1; 2.1.0; 2.2; 2.3; +3 more |
| CVE-2012-0052 | – | Feb 14 | Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers to spoof the identity of arbitrary… Affected: through 2.4.1; 2.0.0; 2.0.1; 2.1.0; 2.2; 2.3; +3 more |
| CVE-2013-4452 | – | Dec 24 | Red Hat JBoss Operations Network 3.1.2 uses world-readable permissions for the (1) server and (2) agent configuration files, which allows local users to obtain authentication… Affected: 3.1.2 |
| CVE-2013-4373 | – | Oct 24 | The storeFiles method in JPADriftServerBean in Red Hat JBoss Operations Network (JON) 3.1.2 allows local users to load arbitrary drift files into a server by writing the files to… Affected: 3.1.2 |
| CVE-2013-4293 | – | Oct 24 | The server in Red Hat JBoss Operations Network (JON) 3.1.2 logs passwords in plaintext, which allows local users to obtain sensitive information by reading the log files Affected: 3.1.2 |
| CVE-2013-2165 | – | Jul 23 | ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss… Affected: 1.0.0; 2.0.0; 2.0.1; 2.1.0; 2.2; 2.3; +9 more |
| CVE-2011-3206 | – | Jan 8 | Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in RHQ 4.2.0, as used in JBoss Operations Network (aka JON or JBoss ON) before 3.0, allow… Affected: through 2.4.1; 2.0.0; 2.0.1; 2.1.0; 2.2; 2.3; +2 more |
Showing 24