jbossweb vulnerabilities (Red Hat)
168 vulnerabilities.
jbosswebRed HatMultiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the...4.3 MediumjbosswebRed HatMultiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24...4.3 MediumjbosswebRed HatThe AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web...4.9 MediumjbosswebRed HatThe SecurityAssociation.getCredential method in JBoss Enterprise Application Platform (EAP)...5.8 MediumjbosswebRed HatThe CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web...4.0 MediumjbosswebRed HatThe (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise...6.8 MediumjbosswebRed HatThe NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0,...2.1 LowjbosswebRed HatCross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application...4.3 MediumjbosswebRed HatJboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypass5.3 MediumjbosswebRed HatJboss enterprise application platform: org.jboss.as.ejb3: jboss enterprise application platform: access restriction bypass via improper ejb method authorization6.5 MediumjbosswebRed HatImproper Authentication in Apache CXF4.3 MediumjbosswebRed HatXML Signature/Encryption Not Validated in Apache CXF10.0 HighjbosswebRed HatUser confusion in IronJacamar4.3 MediumjbosswebRed HatCross-Site Request Forgery in Apache Tomcat4.3 MediumjbosswebRed HatAuthentication Bypass in Apache Tomcat4.3 MediumjbosswebRed HatJGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before...3.3 LowjbosswebRed HatThe servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA...6.8 MediumjbosswebRed HatCross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss...6.0 MediumjbosswebRed HatThe W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss...5.0 MediumjbosswebRed HatImproper Authentication in Apache Tomcat5.0 MediumjbosswebRed HatImproper Authentication in Apache Tomcat5.0 MediumjbosswebRed HatImproper Access Control in Apache Tomcat5.0 MediumjbosswebRed HatRemote web-service operation execution in Apache CXF4.3 MediumjbosswebRed HatMultiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in...2.6 LowjbosswebRed Hattwiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments,...2.1 LowjbosswebRed HatImproper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework7.5 HighjbosswebRed HatOracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup,...2.1 LowjbosswebRed HatOpenID4Java does not verify that Attribute Exchange (AX) information is signed5.8 MediumjbosswebRed HatDenial of Service in Apache Tomcat5.0 MediumjbosswebRed HatUse of Hard-coded Cryptographic Key in Apache Tomcat4.3 MediumjbosswebRed HatImproper Authentication in Apache Tomcat4.3 MediumjbosswebRed HatImproper Authentication in Apache Tomcat5.0 MediumjbosswebRed HatAuthentication Bypass in Apache Tomcat5.0 MediumjbosswebRed HatImproper Input Validation in Apache Tomcat5.0 MediumjbosswebRed Hatjboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss...6.8 MediumjbosswebRed HatImproper Input Validation in Apache Tomcat4.4 MediumjbosswebRed HatApache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment5.0 MediumjbosswebRed HatCross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise...4.3 MediumjbosswebRed HatThe org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run...2.6 LowjbosswebRed HatDrools Improper Input Validation vulnerability allows remote attackers to execute arbitrary code in JBoss EAP7.5 HighjbosswebRed HatApache Tomcat does not properly handle an invalid Transfer-Encoding header6.4 MediumjbosswebRed HatRed Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and...5.0 MediumjbosswebRed HatThe Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform ...7.5 HighjbosswebRed HatThe JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka...5.3 MediumjbosswebRed HatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat2.6 LowjbosswebRed HatTwiddle in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2...2.1 LowjbosswebRed HatMultiple cross-site scripting (XSS) vulnerabilities in the Web Console in the Application Server...4.3 MediumjbosswebRed HatCross-site scripting (XSS) vulnerability in JMX-Console in JBossAs in Red Hat JBoss Enterprise...4.3 MediumjbosswebRed HatDenial of service in Apache Xerces25.0 MediumjbosswebRed HatApache XML Security For Java vulnerable to authentication bypass by HMAC truncation5.0 Medium- Show moreLoading…