Red Hat Security AdvisoryRHSA-2008:0828
JBoss Enterprise Application Platform 4.3.0CP01 security update
Released 2008-08-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform 4.3.0 for RHEL 5 Server asm-1.5.3-1jpp.ep1.2.el5, cglib-2.1.3-2jpp.ep1.6.el5, concurrent-1.3.4-8jpp.ep1.6.el5.1 +21
Fixes 2 records
Priority MEDIUM 53
JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the statu…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.47111 · Published 2008-08-10 · Fixed CWE-264
Priority LOW 25
Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02537 · Published 2008-03-11 · Fixed in 1.2.08 CWE-79
