Redhat Jboss Enterprise Portal Platform vulnerabilities
22 known vulnerabilities affecting redhat/jboss_enterprise_portal_platform.
Total CVEs
22
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH5MEDIUM14LOW3
Vulnerabilities
Page 2 of 2
CVE-2011-2908MEDIUMCVSS 6.0≤ 5.2.1v5.0.0+4 more2012-11-23
CVE-2011-2908 [MEDIUM] CWE-352 CVE-2011-2908: Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise
Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that perform operations on MBeans and possibly execute arbitr
nvd
CVE-2012-2377LOWCVSS 3.3≤ 5.2.1v4.3.0+5 more2012-11-23
CVE-2012-2377 [LOW] CWE-287 CVE-2012-2377: JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.
JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.
nvd
← Previous2 / 2