CVE-2012-1094
Published Mar 10, 2020JBoss AS 7 prior to 7.1.1 and mod_cluster do not handle default hostname in the same way, which can cause the excluded-contexts list to be mismatched and the root context to be ex…
Vendor/product archive
redhat / jboss_application_server CVEs
Beta · best-effort5 CVEs tagged to redhat / jboss_application_server — 0 Critical, 2 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2012-2312
Published Dec 18, 2019An Elevated Privileges issue exists in JBoss AS 7 Community Release due to the improper implementation in the security context propagation, A threat gets reused from the thread po…
CVE-2011-3609
Published Nov 26, 2019A CSRF issue was found in JBoss Application Server 7 before 7.1.0. JBoss did not properly restrict access to the management console information (for example via the "Access-Contro…
CVE-2011-3606
Published Nov 26, 2019A DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0 Beta 1 administration console. A remote attacker could provide a specially-crafted w…
CVE-2013-3734
Published Oct 24, 2017The Embedded Jopr component in JBoss Application Server includes the cleartext datasource password in unspecified HTML responses, which might allow (1) man-in-the-middle attackers…
Showing 1-5 of 5 CVEsPage 1 of 1