Read the docs

JBoss

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

JBoss records in CISA KEV

No JBoss vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jboss 3 records MEDIUM Jboss Application Server 3 records HIGH Enterprise Application Platform 2 records MEDIUM Ironjacamar 1 record LOW Jboss-remoting 1 record MEDIUM Jbpm 1 record LOW Seam 1 record LOW Teiid 1 record LOW

Records

3 records in Jboss · all components

TI-2007-01124 CVE-2007-1157 · GHSA-r86m-hxp8-3mvw

Cross-site request forgery (CSRF) vulnerability in jmx-console/HtmlAdaptor in JBoss…

Priority LOW 35

Cross-site request forgery (CSRF) vulnerability in jmx-console/HtmlAdaptor in JBoss allows remote attackers to perform privileged actions as administrators via certain MBean operations, a different vulnerability than CVE…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.00936 Published 2007-02-27 No fix listed CWE-352
TI-2005-01897 CVE-2005-2006 · GHSA-6ch7-6xxg-vw5p

JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive…

Priority LOW 35

JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive information via a GET request (1) with a "%." (percent dot), which reveals the installation path or (2) with a % (percent) before a filename…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.09301 Published 2005-06-20 No fix listed
Open these records in search →