Red Hat Security Advisory

RHSA-2011:1822

JBoss Enterprise Portal Platform 5.2.0 update

Released 2011-12-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat JBoss Portal 5

Fixes 3 records

TI-2011-03603 CVE-2011-4085 · GHSA-24wp-35x7-5hx9

The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before…

LOW 35

The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0294 Published 2012-11-23 Fixed CWE-287

TI-2011-02593 CVE-2011-2941 · GHSA-5f7q-2xrc-wxhx

Open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0…

LOW 28

Open redirect vulnerability in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the initialURI parameter.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01128 Published 2014-02-26 Fixed CWE-20

TI-2011-03946 CVE-2011-4580 · GHSA-2p4j-3h9f-v3pj

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Enterprise Portal…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01005 Published 2014-02-26 Fixed CWE-79