[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYCglAjOPlkh8gcjkq2y07nGZ-zWF5yLMHmNMs9uBfjA":3,"g5a-family:redhat\u002Fjboss_enterprise_application_platform":451,"g5a-ex:redhat\u002Fjboss_enterprise_application_platform@*":458},{"success":4,"data":5},true,{"product":6,"versions":234,"topVulnerabilitiesByEpss":335,"kevVulnerabilities":397,"seoMetadata":429,"meta":448},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":233},"redhat","jboss_enterprise_application_platform",100,235,6,"2026-03-27",[14,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,50,54,56,59,63,66,69,71,73,76,78,80,82,84,86,88,91,93,95,97,99,101,103,105,107,109,111,113,115,117,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148,150,152,154,156,158,160,162,165,168,170,172,174,176,178,180,182,184,186,188,190,192,194,196,198,200,202,204,207,209,211,213,215,217,219,222,224,227,229,231],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"3.0.7",1,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"3.0.8",{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},"3.1.0",{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},"3.1.1",{"version":26,"cve_count":16,"kev_count":17,"has_kev":18},"3.1.2",{"version":28,"cve_count":16,"kev_count":17,"has_kev":18},"3.1.4",{"version":30,"cve_count":16,"kev_count":17,"has_kev":18},"3.1.5",{"version":32,"cve_count":16,"kev_count":17,"has_kev":18},"3.2.13",{"version":34,"cve_count":16,"kev_count":17,"has_kev":18},"3.2.3",{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},"3.2.4",{"version":38,"cve_count":16,"kev_count":17,"has_kev":18},"3.2.5",{"version":40,"cve_count":16,"kev_count":17,"has_kev":18},"3.2.9",{"version":42,"cve_count":16,"kev_count":17,"has_kev":18},"3.3.0",{"version":44,"cve_count":16,"kev_count":17,"has_kev":18},"3.5.1",{"version":46,"cve_count":16,"kev_count":17,"has_kev":18},"4.0.0",{"version":48,"cve_count":49,"kev_count":17,"has_kev":18},"4.2",5,{"version":51,"cve_count":52,"kev_count":53,"has_kev":4},"4.2.0",14,2,{"version":55,"cve_count":53,"kev_count":17,"has_kev":18},"4.2.2",{"version":57,"cve_count":58,"kev_count":17,"has_kev":18},"4.3",4,{"version":60,"cve_count":61,"kev_count":62,"has_kev":4},"4.3.0",24,3,{"version":64,"cve_count":65,"kev_count":16,"has_kev":4},"5.0.0",20,{"version":67,"cve_count":68,"kev_count":16,"has_kev":4},"5.0.1",7,{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},"5.0.3",{"version":72,"cve_count":52,"kev_count":16,"has_kev":4},"5.1.0",{"version":74,"cve_count":75,"kev_count":16,"has_kev":4},"5.1.1",11,{"version":77,"cve_count":52,"kev_count":16,"has_kev":4},"5.1.2",{"version":79,"cve_count":16,"kev_count":17,"has_kev":18},"5.2",{"version":81,"cve_count":65,"kev_count":16,"has_kev":4},"5.2.0",{"version":83,"cve_count":11,"kev_count":16,"has_kev":4},"5.2.1",{"version":85,"cve_count":49,"kev_count":16,"has_kev":4},"5.2.2",{"version":87,"cve_count":62,"kev_count":17,"has_kev":18},"6",{"version":89,"cve_count":90,"kev_count":53,"has_kev":4},"6.0.0",43,{"version":92,"cve_count":49,"kev_count":17,"has_kev":18},"6.0.1",{"version":94,"cve_count":11,"kev_count":17,"has_kev":18},"6.1.0",{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},"6.1.1",{"version":98,"cve_count":68,"kev_count":17,"has_kev":18},"6.2.0",{"version":100,"cve_count":53,"kev_count":17,"has_kev":18},"6.2.1",{"version":102,"cve_count":58,"kev_count":17,"has_kev":18},"6.2.2",{"version":104,"cve_count":53,"kev_count":17,"has_kev":18},"6.2.3",{"version":106,"cve_count":53,"kev_count":17,"has_kev":18},"6.2.4",{"version":108,"cve_count":58,"kev_count":17,"has_kev":18},"6.3.0",{"version":110,"cve_count":16,"kev_count":17,"has_kev":18},"6.3.1",{"version":112,"cve_count":16,"kev_count":17,"has_kev":18},"6.3.2",{"version":114,"cve_count":17,"kev_count":17,"has_kev":18},"6.3.3",{"version":116,"cve_count":58,"kev_count":17,"has_kev":18},"6.4",{"version":118,"cve_count":119,"kev_count":16,"has_kev":4},"6.4.0",26,{"version":121,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.1",{"version":123,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.10",{"version":125,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.11",{"version":127,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.12",{"version":129,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.13",{"version":131,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.14",{"version":133,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.15",{"version":135,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.16",{"version":137,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.17",{"version":139,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.18",{"version":141,"cve_count":16,"kev_count":17,"has_kev":18},"6.4.19",{"version":143,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.2",{"version":145,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.20",{"version":147,"cve_count":16,"kev_count":17,"has_kev":18},"6.4.21",{"version":149,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.3",{"version":151,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.4",{"version":153,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.5",{"version":155,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.6",{"version":157,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.7",{"version":159,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.8",{"version":161,"cve_count":17,"kev_count":17,"has_kev":18},"6.4.9",{"version":163,"cve_count":164,"kev_count":17,"has_kev":18},"7.0",13,{"version":166,"cve_count":167,"kev_count":16,"has_kev":4},"7.0.0",38,{"version":169,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.1",{"version":171,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.2",{"version":173,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.3",{"version":175,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.4",{"version":177,"cve_count":16,"kev_count":17,"has_kev":18},"7.0.5",{"version":179,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.6",{"version":181,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.7",{"version":183,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.8",{"version":185,"cve_count":17,"kev_count":17,"has_kev":18},"7.0.9",{"version":187,"cve_count":68,"kev_count":17,"has_kev":18},"7.1",{"version":189,"cve_count":65,"kev_count":17,"has_kev":18},"7.1.0",{"version":191,"cve_count":17,"kev_count":17,"has_kev":18},"7.1.1",{"version":193,"cve_count":16,"kev_count":17,"has_kev":18},"7.1.2",{"version":195,"cve_count":17,"kev_count":17,"has_kev":18},"7.1.3",{"version":197,"cve_count":17,"kev_count":17,"has_kev":18},"7.1.4",{"version":199,"cve_count":17,"kev_count":17,"has_kev":18},"7.1.5",{"version":201,"cve_count":17,"kev_count":17,"has_kev":18},"7.1.6",{"version":203,"cve_count":65,"kev_count":17,"has_kev":18},"7.2",{"version":205,"cve_count":206,"kev_count":17,"has_kev":18},"7.2.0",23,{"version":208,"cve_count":17,"kev_count":17,"has_kev":18},"7.2.1",{"version":210,"cve_count":17,"kev_count":17,"has_kev":18},"7.2.2",{"version":212,"cve_count":16,"kev_count":17,"has_kev":18},"7.2.4",{"version":214,"cve_count":16,"kev_count":17,"has_kev":18},"7.2.5",{"version":216,"cve_count":16,"kev_count":17,"has_kev":18},"7.2.6",{"version":218,"cve_count":61,"kev_count":17,"has_kev":18},"7.3",{"version":220,"cve_count":221,"kev_count":17,"has_kev":18},"7.3.0",10,{"version":223,"cve_count":16,"kev_count":17,"has_kev":18},"7.3.9",{"version":225,"cve_count":226,"kev_count":17,"has_kev":18},"7.4",19,{"version":228,"cve_count":16,"kev_count":17,"has_kev":18},"7.4.0",{"version":230,"cve_count":53,"kev_count":17,"has_kev":18},"8.0",{"version":232,"cve_count":11,"kev_count":17,"has_kev":18},"8.0.0","Jboss Enterprise Application Platform by Redhat is a technology product with 100 tracked versions and 235 known security vulnerabilities including 6 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},{"version":26,"cve_count":16,"kev_count":17,"has_kev":18},{"version":28,"cve_count":16,"kev_count":17,"has_kev":18},{"version":30,"cve_count":16,"kev_count":17,"has_kev":18},{"version":32,"cve_count":16,"kev_count":17,"has_kev":18},{"version":34,"cve_count":16,"kev_count":17,"has_kev":18},{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},{"version":38,"cve_count":16,"kev_count":17,"has_kev":18},{"version":40,"cve_count":16,"kev_count":17,"has_kev":18},{"version":42,"cve_count":16,"kev_count":17,"has_kev":18},{"version":44,"cve_count":16,"kev_count":17,"has_kev":18},{"version":46,"cve_count":16,"kev_count":17,"has_kev":18},{"version":48,"cve_count":49,"kev_count":17,"has_kev":18},{"version":51,"cve_count":52,"kev_count":53,"has_kev":4},{"version":55,"cve_count":53,"kev_count":17,"has_kev":18},{"version":57,"cve_count":58,"kev_count":17,"has_kev":18},{"version":60,"cve_count":61,"kev_count":62,"has_kev":4},{"version":64,"cve_count":65,"kev_count":16,"has_kev":4},{"version":67,"cve_count":68,"kev_count":16,"has_kev":4},{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},{"version":72,"cve_count":52,"kev_count":16,"has_kev":4},{"version":74,"cve_count":75,"kev_count":16,"has_kev":4},{"version":77,"cve_count":52,"kev_count":16,"has_kev":4},{"version":79,"cve_count":16,"kev_count":17,"has_kev":18},{"version":81,"cve_count":65,"kev_count":16,"has_kev":4},{"version":83,"cve_count":11,"kev_count":16,"has_kev":4},{"version":85,"cve_count":49,"kev_count":16,"has_kev":4},{"version":87,"cve_count":62,"kev_count":17,"has_kev":18},{"version":89,"cve_count":90,"kev_count":53,"has_kev":4},{"version":92,"cve_count":49,"kev_count":17,"has_kev":18},{"version":94,"cve_count":11,"kev_count":17,"has_kev":18},{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},{"version":98,"cve_count":68,"kev_count":17,"has_kev":18},{"version":100,"cve_count":53,"kev_count":17,"has_kev":18},{"version":102,"cve_count":58,"kev_count":17,"has_kev":18},{"version":104,"cve_count":53,"kev_count":17,"has_kev":18},{"version":106,"cve_count":53,"kev_count":17,"has_kev":18},{"version":108,"cve_count":58,"kev_count":17,"has_kev":18},{"version":110,"cve_count":16,"kev_count":17,"has_kev":18},{"version":112,"cve_count":16,"kev_count":17,"has_kev":18},{"version":114,"cve_count":17,"kev_count":17,"has_kev":18},{"version":116,"cve_count":58,"kev_count":17,"has_kev":18},{"version":118,"cve_count":119,"kev_count":16,"has_kev":4},{"version":121,"cve_count":17,"kev_count":17,"has_kev":18},{"version":123,"cve_count":17,"kev_count":17,"has_kev":18},{"version":125,"cve_count":17,"kev_count":17,"has_kev":18},{"version":127,"cve_count":17,"kev_count":17,"has_kev":18},{"version":129,"cve_count":17,"kev_count":17,"has_kev":18},{"version":131,"cve_count":17,"kev_count":17,"has_kev":18},{"version":133,"cve_count":17,"kev_count":17,"has_kev":18},{"version":135,"cve_count":17,"kev_count":17,"has_kev":18},{"version":137,"cve_count":17,"kev_count":17,"has_kev":18},{"version":139,"cve_count":17,"kev_count":17,"has_kev":18},{"version":141,"cve_count":16,"kev_count":17,"has_kev":18},{"version":143,"cve_count":17,"kev_count":17,"has_kev":18},{"version":145,"cve_count":17,"kev_count":17,"has_kev":18},{"version":147,"cve_count":16,"kev_count":17,"has_kev":18},{"version":149,"cve_count":17,"kev_count":17,"has_kev":18},{"version":151,"cve_count":17,"kev_count":17,"has_kev":18},{"version":153,"cve_count":17,"kev_count":17,"has_kev":18},{"version":155,"cve_count":17,"kev_count":17,"has_kev":18},{"version":157,"cve_count":17,"kev_count":17,"has_kev":18},{"version":159,"cve_count":17,"kev_count":17,"has_kev":18},{"version":161,"cve_count":17,"kev_count":17,"has_kev":18},{"version":163,"cve_count":164,"kev_count":17,"has_kev":18},{"version":166,"cve_count":167,"kev_count":16,"has_kev":4},{"version":169,"cve_count":17,"kev_count":17,"has_kev":18},{"version":171,"cve_count":17,"kev_count":17,"has_kev":18},{"version":173,"cve_count":17,"kev_count":17,"has_kev":18},{"version":175,"cve_count":17,"kev_count":17,"has_kev":18},{"version":177,"cve_count":16,"kev_count":17,"has_kev":18},{"version":179,"cve_count":17,"kev_count":17,"has_kev":18},{"version":181,"cve_count":17,"kev_count":17,"has_kev":18},{"version":183,"cve_count":17,"kev_count":17,"has_kev":18},{"version":185,"cve_count":17,"kev_count":17,"has_kev":18},{"version":187,"cve_count":68,"kev_count":17,"has_kev":18},{"version":189,"cve_count":65,"kev_count":17,"has_kev":18},{"version":191,"cve_count":17,"kev_count":17,"has_kev":18},{"version":193,"cve_count":16,"kev_count":17,"has_kev":18},{"version":195,"cve_count":17,"kev_count":17,"has_kev":18},{"version":197,"cve_count":17,"kev_count":17,"has_kev":18},{"version":199,"cve_count":17,"kev_count":17,"has_kev":18},{"version":201,"cve_count":17,"kev_count":17,"has_kev":18},{"version":203,"cve_count":65,"kev_count":17,"has_kev":18},{"version":205,"cve_count":206,"kev_count":17,"has_kev":18},{"version":208,"cve_count":17,"kev_count":17,"has_kev":18},{"version":210,"cve_count":17,"kev_count":17,"has_kev":18},{"version":212,"cve_count":16,"kev_count":17,"has_kev":18},{"version":214,"cve_count":16,"kev_count":17,"has_kev":18},{"version":216,"cve_count":16,"kev_count":17,"has_kev":18},{"version":218,"cve_count":61,"kev_count":17,"has_kev":18},{"version":220,"cve_count":221,"kev_count":17,"has_kev":18},{"version":223,"cve_count":16,"kev_count":17,"has_kev":18},{"version":225,"cve_count":226,"kev_count":17,"has_kev":18},{"version":228,"cve_count":16,"kev_count":17,"has_kev":18},{"version":230,"cve_count":53,"kev_count":17,"has_kev":18},{"version":232,"cve_count":11,"kev_count":17,"has_kev":18},[336,344,350,355,361,368,375,379,384,391],{"cveId":337,"description":338,"publishedDate":339,"cvssScore":340,"cvssVersion":341,"severity":342,"isKev":4,"epssScore":343},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10",7.5,"v3.1","High",0.99999,{"cveId":345,"description":346,"publishedDate":347,"cvssScore":348,"cvssVersion":341,"severity":342,"isKev":4,"epssScore":349},"CVE-2017-12617","When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-10-04",8.1,0.99988,{"cveId":351,"description":352,"publishedDate":353,"cvssScore":340,"cvssVersion":341,"severity":342,"isKev":18,"epssScore":354},"CVE-2016-2183","The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a \"Sweet32\" attack.","2016-09-01",0.95707,{"cveId":356,"description":357,"publishedDate":358,"cvssScore":359,"cvssVersion":341,"severity":342,"isKev":18,"epssScore":360},"CVE-2014-0224","OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the \"CCS Injection\" vulnerability.","2014-06-05",7.4,0.95326,{"cveId":362,"description":363,"publishedDate":364,"cvssScore":365,"cvssVersion":341,"severity":366,"isKev":18,"epssScore":367},"CVE-2023-48795","The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang\u002FOTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org\u002Fx\u002Fcrypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.","2023-12-18",5.9,"Medium",0.9378,{"cveId":369,"description":370,"publishedDate":371,"cvssScore":372,"cvssVersion":341,"severity":373,"isKev":18,"epssScore":374},"CVE-2017-12629","Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulnerable to this. Note that the XML external entity expansion vulnerability occurs in the XML Query Parser which is available, by default, for any query request with parameters deftype=xmlparser and can be exploited to upload malicious data to the \u002Fupload request handler or as Blind XXE using ftp wrapper in order to read arbitrary local files from the Solr server. Note also that the second vulnerability relates to remote code execution using the RunExecutableListener available on all affected versions of Solr.","2017-10-14",9.8,"Critical",0.91896,{"cveId":376,"description":377,"publishedDate":347,"cvssScore":372,"cvssVersion":341,"severity":373,"isKev":4,"epssScore":378},"CVE-2017-12149","In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.",0.90713,{"cveId":380,"description":381,"publishedDate":382,"cvssScore":340,"cvssVersion":341,"severity":342,"isKev":18,"epssScore":383},"CVE-2019-9515","Some HTTP\u002F2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame is almost equivalent in behavior to a ping. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.","2019-08-13",0.87806,{"cveId":385,"description":386,"publishedDate":387,"cvssScore":388,"cvssVersion":389,"severity":366,"isKev":18,"epssScore":390},"CVE-2014-0226","Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules\u002Fgenerators\u002Fmod_status.c and the lua_ap_scoreboard_worker function in modules\u002Flua\u002Flua_request.c.","2014-07-20",6.8,"v2",0.85744,{"cveId":392,"description":393,"publishedDate":394,"cvssScore":395,"cvssVersion":341,"severity":342,"isKev":4,"epssScore":396},"CVE-2010-1871","JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL.  NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.","2010-08-05",8.8,0.83397,[398,402,412,418,422,426],{"cveId":337,"description":338,"publishedDate":339,"cvssScore":340,"severity":342,"isKev":4,"epssScore":343,"cisaVulnName":399,"cisaDateAdded":339,"cisaShortDescription":400,"cisaRequiredAction":401},"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":403,"description":404,"publishedDate":405,"cvssScore":406,"severity":366,"isKev":4,"epssScore":407,"cisaVulnName":408,"cisaDateAdded":409,"cisaShortDescription":410,"cisaRequiredAction":411},"CVE-2010-0738","The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.","2010-04-28",5.3,0.79415,"Red Hat JBoss Authentication Bypass Vulnerability","2022-05-25","The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.","Apply updates per vendor instructions.",{"cveId":413,"description":414,"publishedDate":405,"cvssScore":340,"severity":342,"isKev":4,"epssScore":415,"cisaVulnName":416,"cisaDateAdded":409,"cisaShortDescription":417,"cisaRequiredAction":411},"CVE-2010-1428","The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.",0.62308,"Red Hat JBoss Information Disclosure Vulnerability","Unauthenticated access to the JBoss Application Server Web Console (\u002Fweb-console) is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this flaw to gain access to sensitive information.",{"cveId":345,"description":346,"publishedDate":347,"cvssScore":348,"severity":342,"isKev":4,"epssScore":349,"cisaVulnName":419,"cisaDateAdded":420,"cisaShortDescription":421,"cisaRequiredAction":411},"Apache Tomcat Remote Code Execution Vulnerability","2022-03-25","When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"cveId":392,"description":393,"publishedDate":394,"cvssScore":395,"severity":342,"isKev":4,"epssScore":396,"cisaVulnName":423,"cisaDateAdded":424,"cisaShortDescription":425,"cisaRequiredAction":411},"Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","2021-12-10","JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.",{"cveId":376,"description":377,"publishedDate":347,"cvssScore":372,"severity":373,"isKev":4,"epssScore":378,"cisaVulnName":427,"cisaDateAdded":424,"cisaShortDescription":428,"cisaRequiredAction":411},"Red Hat JBoss Application Server Remote Code Execution Vulnerability","The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.",{"title":430,"metaDescription":431,"keywords":432,"structuredData":433},"Jboss Enterprise Application Platform by Redhat - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Jboss Enterprise Application Platform by Redhat covering 100 versions with 235 tracked vulnerabilities including 1 critical and 4 high-severity issues and 6 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Jboss Enterprise Application Platform vulnerabilities, Jboss Enterprise Application Platform security, Jboss Enterprise Application Platform CVE, Redhat Jboss Enterprise Application Platform, Jboss Enterprise Application Platform threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Jboss Enterprise Application Platform KEV, Jboss Enterprise Application Platform exploited vulnerabilities",{"@context":434,"@type":435,"name":436,"description":431,"url":437,"manufacturer":438,"applicationCategory":442,"softwareVersion":443,"mainEntity":444},"https:\u002F\u002Fschema.org","SoftwareApplication","Jboss Enterprise Application Platform","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fjboss_enterprise_application_platform",{"@type":439,"name":440,"url":441},"Organization","Redhat","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fredhat","Security Software","100 versions tracked",{"@type":445,"name":446,"description":447,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Jboss Enterprise Application Platform Security Vulnerabilities","Security vulnerabilities affecting Jboss Enterprise Application Platform by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":449,"apiVersion":450},"2026-10-28T13:46:05.690Z","3.0",[452,454,456],{"product":453,"cves":221},"jboss_enterprise_application_platform_expansion_pack",{"product":455,"cves":62},"jboss_enterprise_application_platform_continuous_delivery",{"product":457,"cves":62},"jboss_enterprise_application_platform_text-only_advisories",{"rows":459,"total":11,"capped":18,"failed":17},[460,464,468,472,476,480],{"cveId":337,"name":399,"severity":342,"cvss":340,"added":339,"epss":343,"published":461,"ranges":462,"checked":4,"hits":463,"covers":18},"2023-10-10T14:15:10.883",[89,166],[],{"cveId":403,"name":408,"severity":366,"cvss":406,"added":409,"epss":407,"published":465,"ranges":466,"checked":4,"hits":467,"covers":18},"2010-04-28T22:30:00.447",[51,60],[],{"cveId":413,"name":416,"severity":342,"cvss":340,"added":409,"epss":415,"published":469,"ranges":470,"checked":4,"hits":471,"covers":18},"2010-04-28T22:30:00.793",[51,60],[],{"cveId":345,"name":419,"severity":342,"cvss":348,"added":420,"epss":349,"published":473,"ranges":474,"checked":4,"hits":475,"covers":18},"2017-10-04T01:29:02.12",[89,118],[],{"cveId":392,"name":423,"severity":342,"cvss":395,"added":424,"epss":396,"published":477,"ranges":478,"checked":4,"hits":479,"covers":18},"2010-08-05T13:23:09.477",[60],[],{"cveId":376,"name":427,"severity":373,"cvss":372,"added":424,"epss":378,"published":481,"ranges":482,"checked":4,"hits":483,"covers":18},"2017-10-04T21:01:00.18",[64,67,72,74,77,81,83,85],[]]