Jboss Enterprise Portal Platform (Redhat) - vulnerabilities (CVEs)
22 CVEs, 0 in the last 30 days, 18 known versions, newest CVE from 2015-07-16. Vendor: Redhat.
CVEs of Jboss Enterprise Portal Platform
- CVE-2015-3244 - CVSS 4.9 (medium), 2015-07-16: The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with the default resource serving for GenericPortlet, does not…
- CVE-2014-7852 - CVSS 4.3 (medium), 2014-12-11: Cross-site scripting (XSS) vulnerability in JBoss RichFaces, as used in JBoss Portal 6.1.1, allows remote attackers to inject arbitrary web script or HTML via…
- CVE-2014-3518 - CVSS 6.8 (medium), 2014-07-22: jmx-remoting.sar in JBoss Remoting, as used in Red Hat JBoss Enterprise Application Platform (JEAP) 5.2.0, Red Hat JBoss BRMS 5.3.1, Red Hat JBoss Portal…
- CVE-2011-4580 - CVSS 4.3 (medium), 2014-02-26: Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allow remote attackers to inject arbitrary web…
- CVE-2011-2941 - CVSS 5.8 (medium), 2014-02-26: Open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allows remote attackers to redirect users to arbitrary web sites and…
- CVE-2013-2185 - CVSS 7.5 (high), 2014-01-19: The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1.0 and Red Hat…
- CVE-2013-4424 - CVSS 4.3 (medium), 2013-12-23: Multiple cross-site scripting (XSS) vulnerabilities in the GateIn Portal component in Red Hat JBoss Portal 6.1.0 allow remote attackers to inject arbitrary…
- CVE-2013-2186 - CVSS 7.5 (high), 2013-10-28: The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web…
- CVE-2013-2102 - CVSS 3.3 (low), 2013-10-28: The default configuration of Red Hat JBoss Portal before 6.1.0 enables the JGroups diagnostics service with no authentication when a JGroups channel is…
- CVE-2012-4572 - CVSS 3.7 (low), 2013-10-28: Red Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0 does not load the implementation of a custom authorization…
- CVE-2012-5575 - CVSS 6.4 (medium), 2013-08-19: Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the…
- CVE-2011-1483 - CVSS 5 (medium), 2013-07-29: wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform…
- CVE-2013-2165 - CVSS 7.5 (high), 2013-07-23: ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through…
- CVE-2013-0315 - CVSS 5 (medium), 2013-04-12: The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 allows remote attackers to read arbitrary files via a crafted external XML…
- CVE-2013-0314 - CVSS 7.5 (high), 2013-04-12: The GateIn Portal export/import gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows…
- CVE-2012-3532 - CVSS 6.8 (medium), 2013-04-12: Cross-site request forgery (CSRF) vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers…
- CVE-2012-5531 - CVSS 4.3 (medium), 2013-01-18: Multiple cross-site scripting (XSS) vulnerabilities in the GateIn Portal in JBoss Enterprise Portal Platform 5.2.2 allow remote attackers to inject arbitrary…
- CVE-2012-2377 - CVSS 3.3 (low), 2012-11-23: JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without…
- CVE-2011-4085 - CVSS 6.8 (medium), 2012-11-23: The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and…
- CVE-2011-2908 - CVSS 6 (medium), 2012-11-23: Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before…
- CVE-2011-1096 - CVSS 5 (medium), 2012-11-23: The W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss Enterprise Portal Platform before 5.2.2 and other products,…
- CVE-2011-4605 - CVSS 7.5 (high), 2012-11-23: The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform…
