JO
Product
Jboss Operations Network
24
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 2Low 0
Watch
Add Jboss Operations Network to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-5422 | 8.8 | Sep 7 | The web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote… Affected: through 3.3.6 |
| CVE-2010-0737 | 8.0 | Oct 30 | A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permissions, which allows JBoss ON users to perform management… Affected: before 2.3.1 |
| CVE-2021-4104 | 7.5 | Dec 14 | JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration Affected: 3.0 |
| CVE-2012-5626 | 7.5 | Jan 23 | EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform… Affected: 3.1 |
| CVE-2019-3834 | 7.3 | Oct 3 | It was found that the fix for CVE-2014-0114 had been reverted in JBoss Operations Network 3 (JON) Affected: after 3.2.1 before 3.3.11 |
| CVE-2013-4374 | 7.1 | Nov 4 | An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files Affected: 3.1 |
Showing 6