Approved changes feed: RSS · Atom

cpe:2.3:a:jboss:enterprise_application_platform:4.2.0.cp02:*:*:*:*:*:*:*

part: a version: 4.2.0.cp02 update: *

VendorJboss (d5af4e88-7b39-590c-acfe-40fb2caf622f)
ProductEnterprise Application Platform (65293d1b-ca9d-5de9-bb65-1cd78fe51cce)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jboss-eap/quickstart purl2cpe 2026-06-01 10:10:59.807553
pkg:sourceforge/projects/jboss purl2cpe 2026-06-01 10:10:59.807554

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3273 vulnerable 2026-06-08 04:50:33.976672 Details available
JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string.
Published: 2008-08-10T20:00:00.000Z
Updated: 2024-08-07T09:28:41.976Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.