Every CVE Search/ Get API key

CVE-2009-1380

Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise...

4.3 Medium

Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 allows remote attackers to inject arbitrary web script or HTML via the filter parameter, related to the key property and the position of quote and colon characters.

Exploit likelihood

2.33%Up 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 allows remote attackers to inject arbitrary web script or HTML via the filter parameter, related to the key property and the position of quote and colon characters.

Record
CVE-2009-1380
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 allows remote attackers to inject arbitrary web script or HTML via the filter parameter, related to the key property and the position of quote and colon characters.

Record
CVE-2009-1380
Updated
2026-11-02
EUVDEUVD-2009-1378 No score

Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 allows remote attackers to inject arbitrary web script or HTML via the filter parameter, related to the key property and the position of quote and colon characters.

Record
EUVD-2009-1378
Updated
2026-11-03
GitHub AdvisoriesGHSA-8w77-5ggm-jhfw No score

Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise...

Cross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP08 and 4.3 before 4.3.0.CP07 allows remote attackers to inject arbitrary web script or HTML via the filter parameter, related to the key property and the position of quote and colon characters.

Record
GHSA-8w77-5ggm-jhfw
Weakness
CWE-79
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
glassfish-javamail
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.4.2-0jpp.ep1.5.el4
0:1.4.2-0jpp.ep1.5.el4
glassfish-jaxb
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.1.4-1.12.patch03.ep1.el4
0:2.1.4-1.12.patch03.ep1.el4
glassfish-jaxb-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.1.4-1.12.patch03.ep1.el4
0:2.1.4-1.12.patch03.ep1.el4
glassfish-jsf
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.2_13-2.1.ep1.el4
0:1.2_13-2.1.ep1.el4
hibernate3
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:3.3.1-1.11.GA_CP02.ep1.el4
0:3.3.1-1.11.GA_CP02.ep1.el4
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:3.3.1-1.11.GA_CP02.ep1.el4
0:3.3.1-1.11.GA_CP02.ep1.el4
hibernate3-entitymanager
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:3.3.2-2.5.GA_CP01.ep1.el4
0:3.3.2-2.5.GA_CP01.ep1.el4
hibernate3-entitymanager-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:3.3.2-2.5.GA_CP01.ep1.el4
0:3.3.2-2.5.GA_CP01.ep1.el4
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
Show 114 moreShow less
Affected packages
PackageAffectedFixed
jacorb
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.9.el4
0:2.3.0-1jpp.ep1.9.el4
jakarta-commons-logging-jboss
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.1-9.ep1.el4
0:1.1-9.ep1.el4
jboss-aop
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.5.5-3.CP04.2.ep1.el4
0:1.5.5-3.CP04.2.ep1.el4
jboss-common
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-0jpp.ep1.3.el4
0:1.2.1-0jpp.ep1.3.el4
jboss-messaging
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.4.0-3.SP3_CP09.4.ep1.el4
0:1.4.0-3.SP3_CP09.4.ep1.el4
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.2.3-3.SP1.ep1.el4
0:2.2.3-3.SP1.ep1.el4
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.18.el4
jboss-seam2
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.0.2.FP-1.ep1.21.el4
0:2.0.2.FP-1.ep1.21.el4
jboss-seam2-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.0.2.FP-1.ep1.21.el4
0:2.0.2.FP-1.ep1.21.el4
jbossas
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.4.ep1.el4
0:4.3.0-6.GA_CP07.4.ep1.el4
jbossas-4.3.0.GA_CP07-bin
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.4.ep1.el4
0:4.3.0-6.GA_CP07.4.ep1.el4
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.4.ep1.el4
0:4.3.0-6.GA_CP07.4.ep1.el4
jbossts
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4
1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4
jbossweb
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.0.0-6.CP12.0jpp.ep1.2.el4
0:2.0.0-6.CP12.0jpp.ep1.2.el4
jbossws
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.0.1-4.SP2_CP07.2.ep1.el4
0:2.0.1-4.SP2_CP07.2.ep1.el4
jbossws-common
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.0.0-2.GA_CP05.1.ep1.el4
0:1.0.0-2.GA_CP05.1.ep1.el4
jbossws-framework
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.0.1-1.GA_CP05.1.ep1.el4
0:2.0.1-1.GA_CP05.1.ep1.el4
jbossws-native42
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.0.1-4.SP2_CP07.2.ep1.el4
0:2.0.1-4.SP2_CP07.2.ep1.el4
jcommon
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.0.16-1.1.ep1.el4
0:1.0.16-1.1.ep1.el4
jfreechart
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.0.13-2.3.1.ep1.el4
0:1.0.13-2.3.1.ep1.el4
jgroups
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 1:2.4.7-1.ep1.el4
1:2.4.7-1.ep1.el4
quartz
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.5.2-1jpp.patch01.ep1.4.el4
0:1.5.2-1jpp.patch01.ep1.4.el4
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.ep1.3.el4
0:4.3.0-6.GA_CP07.ep1.3.el4
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.ep1.3.el4
0:4.3.0-6.GA_CP07.ep1.3.el4
xerces-j2
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:2.7.1-9jpp.4.patch_02.1.ep1.el4
0:2.7.1-9jpp.4.patch_02.1.ep1.el4
xml-security
Red Hat:jboss_enterprise_application_platform:4.3.0::el4
From an advisory covering 5 CVEs
 before 0:1.3.0-1.3.patch01.ep1.2.el4
0:1.3.0-1.3.patch01.ep1.2.el4
glassfish-javamail
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.4.2-0jpp.ep1.5.el4
0:1.4.2-0jpp.ep1.5.el4
glassfish-jsf
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.2_13-2.1.ep1.el4
0:1.2_13-2.1.ep1.el4
hibernate3
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:3.3.1-1.11.GA_CP02.ep1.el4
0:3.3.1-1.11.GA_CP02.ep1.el4
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:3.3.1-1.11.GA_CP02.ep1.el4
0:3.3.1-1.11.GA_CP02.ep1.el4
hibernate3-entitymanager
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:3.3.2-2.5.GA_CP01.ep1.el4
0:3.3.2-2.5.GA_CP01.ep1.el4
hibernate3-entitymanager-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:3.3.2-2.5.GA_CP01.ep1.el4
0:3.3.2-2.5.GA_CP01.ep1.el4
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
1:3.2.4-1.SP1_CP09.0jpp.ep1.1.el4
jacorb
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.9.el4
0:2.3.0-1jpp.ep1.9.el4
jakarta-commons-logging-jboss
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.1-9.ep1.el4
0:1.1-9.ep1.el4
jboss-aop
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.5.5-3.CP04.2.ep1.el4
0:1.5.5-3.CP04.2.ep1.el4
jboss-common
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-0jpp.ep1.3.el4
0:1.2.1-0jpp.ep1.3.el4
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.2.3-3.SP1.ep1.el4
0:2.2.3-3.SP1.ep1.el4
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.22.el4
0:1.2.1-1.ep1.22.el4
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.22.el4
0:1.2.1-1.ep1.22.el4
jbossas
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:4.2.0-5.GA_CP08.5.ep1.el4
0:4.2.0-5.GA_CP08.5.ep1.el4
jbossas-4.2.0.GA_CP08-bin
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:4.2.0-5.GA_CP08.5.ep1.el4
0:4.2.0-5.GA_CP08.5.ep1.el4
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:4.2.0-5.GA_CP08.5.ep1.el4
0:4.2.0-5.GA_CP08.5.ep1.el4
jbossts
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4
1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el4
jbossweb
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.0.0-6.CP12.0jpp.ep1.2.el4
0:2.0.0-6.CP12.0jpp.ep1.2.el4
jcommon
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.0.16-1.1.ep1.el4
0:1.0.16-1.1.ep1.el4
jfreechart
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.0.13-2.3.1.ep1.el4
0:1.0.13-2.3.1.ep1.el4
jgroups
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 1:2.4.7-1.ep1.el4
1:2.4.7-1.ep1.el4
quartz
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.5.2-1jpp.patch01.ep1.4.el4
0:1.5.2-1jpp.patch01.ep1.4.el4
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:4.2.0-6.GA_CP08.ep1.3.el4
0:4.2.0-6.GA_CP08.ep1.3.el4
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:4.2.0-6.GA_CP08.ep1.3.el4
0:4.2.0-6.GA_CP08.ep1.3.el4
xerces-j2
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:2.7.1-9jpp.4.patch_02.1.ep1.el4
0:2.7.1-9jpp.4.patch_02.1.ep1.el4
xml-security
Red Hat:jboss_enterprise_application_platform:4.2.0::el4
From an advisory covering 5 CVEs
 before 0:1.3.0-1.3.patch01.ep1.2.el4
0:1.3.0-1.3.patch01.ep1.2.el4
glassfish-jaxb
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.1.4-1.12.patch03.1.ep1.el5
0:2.1.4-1.12.patch03.1.ep1.el5
glassfish-jaxb-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.1.4-1.12.patch03.1.ep1.el5
0:2.1.4-1.12.patch03.1.ep1.el5
glassfish-jsf
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.2_13-2.1.ep1.el5
0:1.2_13-2.1.ep1.el5
hibernate3
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:3.3.1-1.11GA_CP02.ep1.el5
0:3.3.1-1.11GA_CP02.ep1.el5
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:3.3.1-1.11GA_CP02.ep1.el5
0:3.3.1-1.11GA_CP02.ep1.el5
hibernate3-entitymanager
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:3.3.2-2.5.1.ep1.el5
0:3.3.2-2.5.1.ep1.el5
hibernate3-entitymanager-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:3.3.2-2.5.1.ep1.el5
0:3.3.2-2.5.1.ep1.el5
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
jacorb
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.9.1.el5
0:2.3.0-1jpp.ep1.9.1.el5
jboss-aop
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.5.5-3.CP04.2.ep1.el5
0:1.5.5-3.CP04.2.ep1.el5
jboss-common
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.2.1-0jpp.ep1.3.el5.1
0:1.2.1-0jpp.ep1.3.el5.1
jboss-messaging
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.4.0-3.SP3_CP09.4.ep1.el5
0:1.4.0-3.SP3_CP09.4.ep1.el5
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.2.3-3.SP1.ep1.el5
0:2.2.3-3.SP1.ep1.el5
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1
0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.12.el5.1
jboss-seam2
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.0.2.FP-1.ep1.18.el5
0:2.0.2.FP-1.ep1.18.el5
jboss-seam2-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.0.2.FP-1.ep1.18.el5
0:2.0.2.FP-1.ep1.18.el5
jbossas
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.4.2.ep1.el5
0:4.3.0-6.GA_CP07.4.2.ep1.el5
jbossas-4.3.0.GA_CP07-bin
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.4.2.ep1.el5
0:4.3.0-6.GA_CP07.4.2.ep1.el5
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.4.2.ep1.el5
0:4.3.0-6.GA_CP07.4.2.ep1.el5
jbossts
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5
1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5
jbossweb
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.0.0-6.CP12.0jpp.ep1.2.el5
0:2.0.0-6.CP12.0jpp.ep1.2.el5
jbossws
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.0.1-4.SP2_CP07.2.1.ep1.el5
0:2.0.1-4.SP2_CP07.2.1.ep1.el5
jbossws-common
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.0.0-2.GA_CP05.1.ep1.el5
0:1.0.0-2.GA_CP05.1.ep1.el5
jbossws-framework
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.0.1-1.GA_CP05.1.ep1.el5
0:2.0.1-1.GA_CP05.1.ep1.el5
jbossws-native42
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:2.0.1-4.SP2_CP07.2.1.ep1.el5
0:2.0.1-4.SP2_CP07.2.1.ep1.el5
jcommon
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.0.16-1.1.ep1.el5
0:1.0.16-1.1.ep1.el5
jfreechart
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.0.13-2.3.1.ep1.el5
0:1.0.13-2.3.1.ep1.el5
jgroups
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 1:2.4.7-1.ep1.el5
1:2.4.7-1.ep1.el5
quartz
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.5.2-1jpp.patch01.ep1.4.1.el5
0:1.5.2-1jpp.patch01.ep1.4.1.el5
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.ep1.3.el5
0:4.3.0-6.GA_CP07.ep1.3.el5
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:4.3.0-6.GA_CP07.ep1.3.el5
0:4.3.0-6.GA_CP07.ep1.3.el5
xml-security
Red Hat:jboss_enterprise_application_platform:4.3.0::el5
From an advisory covering 5 CVEs
 before 0:1.3.0-1.3.patch01.ep1.2.1.el5
0:1.3.0-1.3.patch01.ep1.2.1.el5
glassfish-jsf
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.2_13-2.1.ep1.el5
0:1.2_13-2.1.ep1.el5
hibernate3
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
hibernate3-annotations
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:3.3.1-1.11GA_CP02.ep1.el5
0:3.3.1-1.11GA_CP02.ep1.el5
hibernate3-annotations-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:3.3.1-1.11GA_CP02.ep1.el5
0:3.3.1-1.11GA_CP02.ep1.el5
hibernate3-entitymanager
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:3.3.2-2.5.1.ep1.el5
0:3.3.2-2.5.1.ep1.el5
hibernate3-entitymanager-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:3.3.2-2.5.1.ep1.el5
0:3.3.2-2.5.1.ep1.el5
hibernate3-javadoc
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
1:3.2.4-1.SP1_CP09.0jpp.ep1.2.4.el5
jacorb
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:2.3.0-1jpp.ep1.9.1.el5
0:2.3.0-1jpp.ep1.9.1.el5
jboss-aop
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.5.5-3.CP04.2.ep1.el5
0:1.5.5-3.CP04.2.ep1.el5
jboss-common
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.2.1-0jpp.ep1.3.el5.1
0:1.2.1-0jpp.ep1.3.el5.1
jboss-remoting
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:2.2.3-3.SP1.ep1.el5
0:2.2.3-3.SP1.ep1.el5
jboss-seam
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.14.el5
0:1.2.1-1.ep1.14.el5
jboss-seam-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.2.1-1.ep1.14.el5
0:1.2.1-1.ep1.14.el5
jbossas
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:4.2.0-5.GA_CP08.5.2.ep1.el5
0:4.2.0-5.GA_CP08.5.2.ep1.el5
jbossas-4.2.0.GA_CP08-bin
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:4.2.0-5.GA_CP08.5.2.ep1.el5
0:4.2.0-5.GA_CP08.5.2.ep1.el5
jbossas-client
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:4.2.0-5.GA_CP08.5.2.ep1.el5
0:4.2.0-5.GA_CP08.5.2.ep1.el5
jbossts
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5
1:4.2.3-1.SP5_CP08.1jpp.ep1.1.el5
jbossweb
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:2.0.0-6.CP12.0jpp.ep1.2.el5
0:2.0.0-6.CP12.0jpp.ep1.2.el5
jcommon
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.0.16-1.1.ep1.el5
0:1.0.16-1.1.ep1.el5
jfreechart
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.0.13-2.3.1.ep1.el5
0:1.0.13-2.3.1.ep1.el5
jgroups
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 1:2.4.7-1.ep1.el5
1:2.4.7-1.ep1.el5
quartz
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.5.2-1jpp.patch01.ep1.4.1.el5
0:1.5.2-1jpp.patch01.ep1.4.1.el5
rh-eap-docs
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:4.2.0-6.GA_CP08.ep1.3.el5
0:4.2.0-6.GA_CP08.ep1.3.el5
rh-eap-docs-examples
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:4.2.0-6.GA_CP08.ep1.3.el5
0:4.2.0-6.GA_CP08.ep1.3.el5
xml-security
Red Hat:jboss_enterprise_application_platform:4.2.0::el5
From an advisory covering 5 CVEs
 before 0:1.3.0-1.3.patch01.ep1.2.1.el5
0:1.3.0-1.3.patch01.ep1.2.1.el5

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-1380 is a medium vulnerability (CVSS 4.3) in Redhat Jboss Enterprise Application Platform, published December 15, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.33%, the 83rd percentile. No source names a fixed version.

References

Show 38 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open