Red Hat JBoss Enterprise Application Platform 4/jbossas
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Deserialization of Untrusted Data in Apache commons collections | commons-collections:commons-collectionsnet.sourceforge.collections:collections-generic | MavenRed Hat | Critical | Fix reported | |
| PooledInvokerServlet is not secured, and deserializes data | Red Hat JBoss BRMS 5/jbossasRed Hat JBoss Enterprise Application Platform 4/jbossas | Red Hat | High | No fix reported | |
| JBoss EAP 5 JMX servlet deserializes Java objects sent via HTTP | Red Hat JBoss Enterprise Application Platform 4/jbossasRed Hat JBoss Enterprise Application Platform 5/jbossas | Red Hat | Medium | No fix reported |