Jboss Application Server (Redhat) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2020-03-10. Vendor: Redhat.

CVEs of Jboss Application Server

• CVE-2012-1094 - CVSS 7.5 (high), 2020-03-10: JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the…
• CVE-2012-2312 - CVSS 7.8 (high), 2019-12-18: An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, A threat gets…
• CVE-2011-3609 - CVSS 6.5 (medium), 2019-11-26: A CSRF issue was found in JBoss Application Server 7 before 7.1.0. JBoss did not properly restrict access to the management console information (for example…
• CVE-2011-3606 - CVSS 5.4 (medium), 2019-11-26: A DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0 Beta 1 administration console. A remote attacker could provide…
• CVE-2013-3734 - CVSS 6.6 (medium), 2017-10-24: The Embedded Jopr component in JBoss Application Server includes the cleartext datasource password in unspecified HTML responses, which might allow (1)…