Red Hat Security AdvisoryRHSA-2008:0826
JBoss Enterprise Application Platform 4.3.0.CP01 security update
Released 2008-08-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 AS glassfish-javamail-1.4.0-0jpp.ep1.9.el4, hibernate3-1:3.2.4-1.SP1_CP03.0jpp.ep1.1.el4, hibernate3-annotations-3.2.1-1.patch02.1jpp.ep1.3.el4 +16
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 4 ES glassfish-javamail-1.4.0-0jpp.ep1.9.el4, hibernate3-1:3.2.4-1.SP1_CP03.0jpp.ep1.1.el4, hibernate3-annotations-3.2.1-1.patch02.1jpp.ep1.3.el4 +16
Fixes 2 records
Priority MEDIUM 53
JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the statu…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.47111 · Published 2008-08-10 · Fixed CWE-264
Priority LOW 25
Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02537 · Published 2008-03-11 · Fixed in 1.2.08 CWE-79
