Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: JBoss Component: Jboss Clear all filters
TI-2007-01124 CVE-2007-1157 · GHSA-r86m-hxp8-3mvw

Cross-site request forgery (CSRF) vulnerability in jmx-console/HtmlAdaptor in JBoss…

Priority LOW 35

Cross-site request forgery (CSRF) vulnerability in jmx-console/HtmlAdaptor in JBoss allows remote attackers to perform privileged actions as administrators via certain MBean operations, a different vulnerability than CVE…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.00936 Published 2007-02-27 No fix listed CWE-352
TI-2005-01897 CVE-2005-2006 · GHSA-6ch7-6xxg-vw5p

JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive…

Priority LOW 35

JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive information via a GET request (1) with a "%." (percent dot), which reveals the installation path or (2) with a % (percent) before a filename…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.09301 Published 2005-06-20 No fix listed