Jboss Portal (Redhat) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2020-03-11. Vendor: Redhat.

CVEs of Jboss Portal

• CVE-2011-2487 - CVSS 5.9 (medium), 2020-03-11: The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.
• CVE-2012-5626 - CVSS 7.5 (high), 2020-01-23: EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red…
• CVE-2014-0245 - CVSS 5.9 (medium), 2020-01-02: It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For a specific WSRP endpoint, under…
• CVE-2013-6495 - CVSS 6.1 (medium), 2019-12-11: JBossWeb Bayeux has reflected XSS
• CVE-2015-7501 - CVSS 9.8 (critical), 2017-11-09: Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform…
• CVE-2015-5176 - CVSS 5.8 (medium), 2015-08-11: The PortletRequestDispatcher in PortletBridge, as used in Red Hat JBoss Portal 6.2.0, does not properly enforce the security constraints of servlets, which…