Security
فارسی
All products

Red Hat JBoss SOA Platform 5/security

Red Hat · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Remote web-service operation execution in Apache CXFCVE-2012-3451 · GHSA-55J7-F5WF-43M4 org.apache.cxf:cxfRed Hat JBoss BRMS 5/security MavenRed Hat High Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasyCVE-2011-5245 · GHSA-G4JG-GPWV-P7WV org.jboss.resteasy:resteasy-jaxb-providerRed Hat JBoss BRMS 5/security MavenRed Hat Medium Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasyCVE-2012-0818 · GHSA-WRRH-G7H3-GQMX org.jboss.resteasy:resteasy-clientRed Hat JBoss BRMS 5/security MavenRed Hat Medium Fix reported
Improper Authentication in Apache CXFCVE-2012-5633 · GHSA-XF9F-32GH-H2W4 org.apache.cxf:cxfRed Hat JBoss BRMS 5/security MavenRed Hat Medium Fix reported
Denial of service in JBoss resteasyCVE-2016-6346 · GHSA-WXVR-VQFP-9CQW org.jboss.resteasy:resteasy-jaxrsRed Hat BPM Suite 6/resteasy MavenRed Hat High Fix reported
XML Signature/Encryption Not Validated in Apache CXFCVE-2012-2379 · GHSA-2G99-C67P-56HM org.apache.cxf:cxfRed Hat JBoss BRMS 5/security MavenRed Hat High Fix reported
JacksonJsonpInterceptor susceptible to cross-site script inclusion (XSSI) attackCVE-2016-6348 · GHSA-9XFC-J5MF-9W5P org.jboss.resteasy:resteasy-clientRed Hat BPM Suite 6/Build and Assembly MavenRed Hat Medium Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasyCVE-2016-6345 · GHSA-VXHJ-3X7P-JXP5 org.jboss.resteasy:resteasy-clientRed Hat BPM Suite 6/resteasy MavenRed Hat Medium Fix reported
Improper Neutralization of Input During Web Page Generation in RESTEasyCVE-2016-6347 · GHSA-R346-RMRG-QPGH org.jboss.resteasy:resteasy-clientRed Hat Enterprise Linux 7/resteasy-base MavenRed Hat Medium Fix reported
CSRF on jmx-console allows invocation of operations on mbeansCVE-2011-2908 Red Hat JBoss BRMS 5/securityRed Hat JBoss Portal 5/security Red Hat Medium No fix reported
JGroups diagnostics service enabled by default with no authentication when a JGroups channel is startedCVE-2012-2377 Red Hat JBoss BRMS 5/securityRed Hat JBoss Portal 5/Requirements Red Hat Low No fix reported
JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealmCVE-2012-1167 Red Hat JBoss BRMS 5/securityRed Hat JBoss Portal 5/Requirements Red Hat Medium No fix reported
JBoss invoker servlets do not require authenticationCVE-2012-0874 Red Hat JBoss Portal 4/RequirementsRed Hat JBoss Portal 5/Requirements Red Hat Low No fix reported
PicketBox/JBossSX: Unauthorized access to and modification of application server configuration and state by applicationCVE-2014-0005 Red Hat JBoss BRMS 5/securityRed Hat JBoss Enterprise Application Platform 5/security Red Hat Medium No fix reported