CVE-2008-3519
The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application...
The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP), possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the DownloadServerClasses property to true, which allows remote attackers to obtain sensitive information (non-EJB classes) via a download request, a different vulnerability than CVE-2008-3273.
Exploit likelihood
What each source reports
NVD Score used
4.3
The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP), possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the DownloadServerClasses property to true, which allows remote attackers to obtain sensitive information (non-EJB classes) via a download request, a different vulnerability than CVE-2008-3273.
- Record
CVE-2008-3519- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-16
- Updated
- 2026-11-02
CVE List No score
The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP), possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the DownloadServerClasses property to true, which allows remote attackers to obtain sensitive information (non-EJB classes) via a download request, a different vulnerability than CVE-2008-3273.
- Record
CVE-2008-3519- Updated
- 2026-11-02
EUVDEUVD-2008-3505 No score
The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP), possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the DownloadServerClasses property to true, which allows remote attackers to obtain sensitive information (non-EJB classes) via a download request, a different vulnerability than CVE-2008-3273.
- Record
EUVD-2008-3505- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-62gp-x3rq-2r53 No score
The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application...
The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP), possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the DownloadServerClasses property to true, which allows remote attackers to obtain sensitive information (non-EJB classes) via a download request, a different vulnerability than CVE-2008-3273.
- Record
GHSA-62gp-x3rq-2r53- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
glassfish-javamailRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:1.4.0-0jpp.ep1.10.el4 | 0:1.4.0-0jpp.ep1.10.el4 |
glassfish-jaxbRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:2.1.4-1jpp.ep1.2.el4 | 0:2.1.4-1jpp.ep1.2.el4 |
glassfish-jaxb-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:2.1.4-1jpp.ep1.2.el4 | 0:2.1.4-1jpp.ep1.2.el4 |
glassfish-jaxwsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:2.1.1-1jpp.ep1.3.el4 | 0:2.1.1-1jpp.ep1.3.el4 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4 | 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4 | 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4 | 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4 | 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4 |
hibernate3-validatorRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:0.0.0-1.1jpp.ep1.1.el4 | 0:0.0.0-1.1jpp.ep1.1.el4 |
javassistRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:3.8.0-1.ep1.el4 | 0:3.8.0-1.ep1.el4 |
Show 69 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jboss-aopRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:1.5.5-2.CP02.0jpp.ep1.2.el4 | 0:1.5.5-2.CP02.0jpp.ep1.2.el4 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:1.4.0-1.SP3_CP03.0jpp.ep1.3.el4 | 0:1.4.0-1.SP3_CP03.0jpp.ep1.3.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:2.2.2-3.SP9.0jpp.ep1.1.el4 | 0:2.2.2-3.SP9.0jpp.ep1.1.el4 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el4 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el4 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.10.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:4.3.0-2.GA_CP02.ep1.10.el4 | 0:4.3.0-2.GA_CP02.ep1.10.el4 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 1:4.2.3-1.SP5_CP02.1jpp.ep1.1.el4 | 1:4.2.3-1.SP5_CP02.1jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:2.0.0-4.CP06.0jpp.ep1.1.el4 | 0:2.0.0-4.CP06.0jpp.ep1.1.el4 |
jbosswsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:2.0.1-2.SP2_CP03.0jpp.ep1.1.el4 | 0:2.0.1-2.SP2_CP03.0jpp.ep1.1.el4 |
jbossws-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:1.0.0-1.GA_CP01.0jpp.ep1.3.el4 | 0:1.0.0-1.GA_CP01.0jpp.ep1.3.el4 |
jbossws-frameworkRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:2.0.1-0jpp.ep1.11.el4 | 0:2.0.1-0jpp.ep1.11.el4 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:4.3.0-3.GA_CP02.ep1.9.el4 | 0:4.3.0-3.GA_CP02.ep1.9.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.3.0::el4 From an advisory covering 2 CVEs |
before 0:4.3.0-3.GA_CP02.ep1.9.el4 | 0:4.3.0-3.GA_CP02.ep1.9.el4 |
glassfish-jafRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.1.0-0jpp.ep1.12.el5.1 | 0:1.1.0-0jpp.ep1.12.el5.1 |
glassfish-javamailRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.4.0-0jpp.ep1.10.el5 | 0:1.4.0-0jpp.ep1.10.el5 |
glassfish-jaxbRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:2.1.4-1jpp.ep1.4.el5.2 | 0:2.1.4-1jpp.ep1.4.el5.2 |
glassfish-jaxwsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:2.1.1-1jpp.ep1.3.el5 | 0:2.1.1-1jpp.ep1.3.el5 |
glassfish-jstlRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.2.0-0jpp.ep1.10.el5 | 0:1.2.0-0jpp.ep1.10.el5 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5 | 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1 | 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1 | 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1 |
hibernate3-commons-annotationsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:0.0.0-1.1jpp.ep1.1.el5 | 0:0.0.0-1.1jpp.ep1.1.el5 |
hibernate3-entitymanagerRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:3.2.1-2.GA_CP03.1jpp.ep1.9.el5 | 0:3.2.1-2.GA_CP03.1jpp.ep1.9.el5 |
hibernate3-entitymanager-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:3.2.1-2.GA_CP03.1jpp.ep1.9.el5 | 0:3.2.1-2.GA_CP03.1jpp.ep1.9.el5 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5 | 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5 |
hibernate3-validatorRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:0.0.0-1.1jpp.ep1.1.el5 | 0:0.0.0-1.1jpp.ep1.1.el5 |
javassistRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:3.8.0-1jpp.ep1.2.el5 | 0:3.8.0-1jpp.ep1.2.el5 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.5.5-2.CP02.0jpp.ep1.2.el5 | 0:1.5.5-2.CP02.0jpp.ep1.2.el5 |
jboss-jaxrRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.2.0-SP1.0jpp.ep1.4.el5 | 0:1.2.0-SP1.0jpp.ep1.4.el5 |
jboss-messagingRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.4.0-1.SP3_CP03.0jpp.ep1.3.el5 | 0:1.4.0-1.SP3_CP03.0jpp.ep1.3.el5 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:2.2.2-3.SP9.0jpp.ep1.2.el5 | 0:2.2.2-3.SP9.0jpp.ep1.2.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.7.el5.1 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.7.el5.1 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.7.el5.1 | 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.7.el5.1 |
jbossasRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:4.3.0-2.GA_CP02.ep1.10.el5.2 | 0:4.3.0-2.GA_CP02.ep1.10.el5.2 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 1:4.2.3-1.SP5_CP02.1jpp.ep1.2.el5 | 1:4.2.3-1.SP5_CP02.1jpp.ep1.2.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:2.0.0-4.CP06.0jpp.ep1.1.el5 | 0:2.0.0-4.CP06.0jpp.ep1.1.el5 |
jbosswsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:2.0.1-2.SP2_CP03.0jpp.ep1.1.el5.1 | 0:2.0.1-2.SP2_CP03.0jpp.ep1.1.el5.1 |
jbossws-commonRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.0.0-1.GA_CP01.0jpp.ep1.3.el5 | 0:1.0.0-1.GA_CP01.0jpp.ep1.3.el5 |
jbossws-frameworkRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:2.0.1-0jpp.ep1.11.el5 | 0:2.0.1-0jpp.ep1.11.el5 |
jbossxbRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:1.0.0-2.SP3.0jpp.ep1.3.el5.1 | 0:1.0.0-2.SP3.0jpp.ep1.3.el5.1 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.3.0::el5 From an advisory covering 2 CVEs |
before 0:4.3.0-2.GA_CP02.ep1.6.el5 | 0:4.3.0-2.GA_CP02.ep1.6.el5 |
glassfish-javamailRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:1.4.0-0jpp.ep1.10.el4 | 0:1.4.0-0jpp.ep1.10.el4 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4 | 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4 | 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4 | 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el4 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4 | 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el4 |
hibernate3-validatorRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:0.0.0-1.1jpp.ep1.1.el4 | 0:0.0.0-1.1jpp.ep1.1.el4 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:1.5.5-2.CP02.0jpp.ep1.2.el4 | 0:1.5.5-2.CP02.0jpp.ep1.2.el4 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:2.2.2-3.SP9.0jpp.ep1.1.el4 | 0:2.2.2-3.SP9.0jpp.ep1.1.el4 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:1.2.1-1.ep1.10.el4 | 0:1.2.1-1.ep1.10.el4 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:1.2.1-1.ep1.10.el4 | 0:1.2.1-1.ep1.10.el4 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:4.2.0-3.GA_CP04.ep1.8.el4 | 0:4.2.0-3.GA_CP04.ep1.8.el4 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 1:4.2.3-1.SP5_CP02.1jpp.ep1.1.el4 | 1:4.2.3-1.SP5_CP02.1jpp.ep1.1.el4 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:2.0.0-4.CP06.0jpp.ep1.1.el4 | 0:2.0.0-4.CP06.0jpp.ep1.1.el4 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:4.2.0-4.GA_CP04.ep1.5.el4 | 0:4.2.0-4.GA_CP04.ep1.5.el4 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el4 From an advisory covering 2 CVEs |
before 0:4.2.0-4.GA_CP04.ep1.5.el4 | 0:4.2.0-4.GA_CP04.ep1.5.el4 |
hibernate3Red Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5 | 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5 |
hibernate3-annotationsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1 | 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1 |
hibernate3-annotations-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1 | 0:3.2.1-4.GA_CP02.1jpp.ep1.7.el5.1 |
hibernate3-javadocRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5 | 1:3.2.4-1.SP1_CP04.0jpp.ep1.3.el5 |
jboss-aopRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:1.5.5-2.CP02.0jpp.ep1.2.el5 | 0:1.5.5-2.CP02.0jpp.ep1.2.el5 |
jboss-remotingRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:2.2.2-3.SP9.0jpp.ep1.2.el5 | 0:2.2.2-3.SP9.0jpp.ep1.2.el5 |
jboss-seamRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:1.2.1-1.ep1.9.el5 | 0:1.2.1-1.ep1.9.el5 |
jboss-seam-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:1.2.1-1.ep1.9.el5 | 0:1.2.1-1.ep1.9.el5 |
jbossasRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:4.2.0-4.GA_CP04.ep1.7.el5.6 | 0:4.2.0-4.GA_CP04.ep1.7.el5.6 |
jbosstsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 1:4.2.3-1.SP5_CP02.1jpp.ep1.2.el5 | 1:4.2.3-1.SP5_CP02.1jpp.ep1.2.el5 |
jbosswebRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:2.0.0-4.CP06.0jpp.ep1.1.el5 | 0:2.0.0-4.CP06.0jpp.ep1.1.el5 |
rh-eap-docsRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:4.2.0-4.GA_CP04.ep1.3.el5 | 0:4.2.0-4.GA_CP04.ep1.3.el5 |
rh-eap-docs-examplesRed Hat:jboss_enterprise_application_platform:4.2.0::el5 From an advisory covering 2 CVEs |
before 0:4.2.0-4.GA_CP04.ep1.3.el5 | 0:4.2.0-4.GA_CP04.ep1.3.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3519 is a medium vulnerability (CVSS 4.3) in Redhat Jboss Enterprise Application Platform, published September 23, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.62%, the 76th percentile. No source names a fixed version.
References
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=458823
redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp02/html-single/readme/index.html
redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp04/html-single/readme/index.html
redhat.com/support/errata/RHSA-2008-0832.html
redhat.com/support/errata/RHSA-2008-0833.html
redhat.com/support/errata/RHSA-2008-0831.html
Show 26 moreShow less
redhat.com/support/errata/RHSA-2008-0834.html
securityfocus.com/bid/31300
exchange.xforce.ibmcloud.com/vulnerabilities/45305
securitytracker.com/id?1020905
nvd.nist.gov/vuln/detail/CVE-2008-3519
github.com/advisories/GHSA-62gp-x3rq-2r53
access.redhat.com/errata/RHSA-2008:0831
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=427216
bugzilla.redhat.com/show_bug.cgi?id=456975
bugzilla.redhat.com/show_bug.cgi?id=458823
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0831.json
access.redhat.com/security/cve/CVE-2007-5342
cve.org/CVERecord?id=CVE-2007-5342
nvd.nist.gov/vuln/detail/CVE-2007-5342
access.redhat.com/security/cve/CVE-2008-3519
cve.org/CVERecord?id=CVE-2008-3519
access.redhat.com/errata/RHSA-2008:0832
bugzilla.redhat.com/show_bug.cgi?id=458713
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0832.json
access.redhat.com/errata/RHSA-2008:0833
bugzilla.redhat.com/show_bug.cgi?id=456973
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0833.json
access.redhat.com/errata/RHSA-2008:0834
bugzilla.redhat.com/show_bug.cgi?id=458711
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0834.json