Redhat Jboss Application Server
5 CVEs affecting Redhat Jboss Application Server. Latest disclosed: 2020-03-10. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2012-2312 | High | 7.8 | 2019-12-18 | An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, A threat gets reuse… |
CVE-2012-1094 | High | 7.5 | 2020-03-10 | JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the r… |
CVE-2013-3734 | Medium | 6.6 | 2017-10-24 | The Embedded Jopr component in JBoss Application Server includes the cleartext datasource password in unspecified HTML responses, which might allow (1) man-in-… |
CVE-2011-3609 | Medium | 6.5 | 2019-11-26 | A CSRF issue was found in JBoss Application Server 7 before 7.1.0. JBoss did not properly restrict access to the management console information (for example vi… |
CVE-2011-3606 | Medium | 5.4 | 2019-11-26 | A DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0 Beta 1 administration console. A remote attacker could provide a… |