Skip to contentRedhat Jboss Enterprise Web Server vulnerabilities
- openldap, debian linux, fedoraproject fedora +7 more +9 moreA flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a...CVE-2020-25710Fix available7.5 High
- red hat jboss brms, jboss enterprise application platform, jboss enterprise web server +3 more +5 moreEJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat...CVE-2012-56267.5 High
- cyrusimap cyrus-sasl, apache bookkeeper, apple ipados +19 more +21 morecyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote...CVE-2019-19906Fix available7.5 High
- edeploy, redhat jboss enterprise web server +1 moreeDeploy has tmp file race condition flawsCVE-2014-37018.1 High
- edeploy, redhat jboss enterprise web server +1 moreeDeploy has RCE via cPickle deserialization of untrusted dataCVE-2014-36999.8 Critical
- jbossas4 as, redhat jboss community application server, jboss enterprise web server +2 moreAn issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores...CVE-2012-21483.3 Low
- edeploy, redhat jboss enterprise web server +1 moreeDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted dataCVE-2014-37009.8 Critical
- jboss keycloak, redhat jboss enterprise web server +1 moreJBoss KeyCloak is vulnerable to soft token deletion via CSRFCVE-2014-3655Fix available4.3 Medium
- apache struts, redhat jboss enterprise web server +1 moreStruts ParameterInterceptor vulnerability allows remote command executionCVE-2011-3923Public exploitFix availableEPSS 89.5%9.8 Critical
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracleCVE-2019-1559Fix availableEPSS 17.1%5.9 Medium
- apache tomcat, canonical ubuntu linux, debian linux +5 more +7 moreIn Apache Tomcat there is an improper handing of overflow in the UTF-8 decoderCVE-2018-1336Fix availableEPSS 20.4%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +7 more +9 moreApache Tomcat unauthorized access vulnerabilityCVE-2018-1304Public exploitFix availableEPSS 17.1%5.9 Medium
- apache portable runtime, debian linux, redhat enterprise linux desktop +8 more +10 moreWhen apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field...CVE-2017-12613Fix available7.1 High
- apache tomcat, canonical ubuntu linux, debian linux +55 more +57 moreUnrestricted Upload of File with Dangerous Type Apache TomcatCVE-2017-12617In KEVPublic exploitFix availableEPSS 100.0%8.1 High
- redhat amq, jboss enterprise web server +1 moreConsole: CORS headers set to allow all in Red Hat AMQ.CVE-2015-51847.5 High
- redhat amq, jboss a-mq, jboss enterprise web server +2 moreConsole: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ.CVE-2015-51837.5 High
- apache tomcat, netapp 7-mode transition tool, oncommand balance +19 more +21 moreWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the serverCVE-2017-12615In KEVPublic exploitFix availableEPSS 99.7%8.1 High
- apache http server, apple mac os x, debian linux +12 more +14 moreIn Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-...CVE-2017-9788Fix availableEPSS 56.8%9.1 Critical
- apache tomcat, canonical ubuntu linux, debian linux +16 more +18 moreApache Tomcat Improper Access Control vulnerabilityCVE-2016-8735In KEVFix availableEPSS 90.3%9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreIncorrect Authorization in Apache TomcatCVE-2016-6797Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreApache Tomcat vulnerable to SecurityManager bypassCVE-2016-6796Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreSystem Property Disclosure in Apache TomcatCVE-2016-6794Fix available5.3 Medium
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreAuthentication Bypass Using an Alternate Path or Channel in Apache TomcatCVE-2016-5018Fix availableEPSS 10.3%9.1 Critical
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreObservable Discrepancy in Apache TomcatCVE-2016-0762Fix available5.9 Medium
- fedoraproject fedora, redhat jboss enterprise application platform, jboss enterprise web server +2 moremod_cluster Denial of Service vulnerabilityCVE-2016-3110Fix available7.5 High
- cisco content security management appliance, nodejs node.js, openssl +6 more +8 moreThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols...CVE-2016-2183Public exploitFix availableEPSS 94.7%7.5 High
- apache http server, canonical ubuntu linux, debian linux +16 more +18 moreThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...CVE-2016-5387Fix availableEPSS 55.7%8.1 High
- redhat data grid, jboss a-mq, openshift +12 more +14 moreDeserialization of Untrusted Data in Apache commons collectionsCVE-2015-7501Known exploitedPublic exploitFix availableEPSS 85.6%9.8 Critical
- apache http server, apple mac os x, mac os x server +11 more +13 moreThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ...CVE-2013-5704Fix availableEPSS 58.0%5.0 Medium
- redhat jboss enterprise brms platform, jboss enterprise portal platform, jboss enterprise web server +2 more +4 moreArbitrary file write in Apache Commons FileuploadCVE-2013-2186Public exploitFix availableEPSS 12.7%7.5 High
- redhat enterprise linux, jboss enterprise web server +1 moreThe (1) tomcat5, (2) tomcat6, and (3) tomcat7 init scripts, as used in the RPM distribution of...CVE-2013-1976Fix available6.9 Medium
- openssl, fedoraproject fedora, filezilla-project filezilla server +13 more +15 moreOpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict...CVE-2014-0224Public exploitFix availableEPSS 95.3%7.4 High
- apache http server, debian linux, opensuse +8 more +10 moreprotocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header...CVE-2012-0053Public exploitFix availableEPSS 82.2%4.3 Medium
- apache http server, debian linux, opensuse +9 more +11 morescoreboard.c in the Apache HTTP Server 2.2.21 and earlier might allow local users to cause a...CVE-2012-0031Public exploitFix available4.6 Medium
- apache http server, redhat jboss enterprise web server +1 moreThe mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with...CVE-2011-3348Fix availableEPSS 22.4%4.3 Medium