Jboss Enterprise Soa Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:jboss_enterprise_soa_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Jboss Enterprise Soa Platform (706659d4-3cce-5e21-b858-62ce82f998e7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-2377 |
vulnerable | 2026-06-08 05:02:04.013780 |
Details available
JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent networks to read diagnostics information via a crafted IP multicast.
Published: 2012-11-23T20:00:00.000Z
Updated: 2024-08-06T19:34:23.942Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1167 |
vulnerable | 2026-06-08 05:00:47.934273 |
Details available
The JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2.2, Web Platform before 5.1.2, BRMS Platform before 5.3.0, and SOA Platform before 5.3.0, when the server is configured to use the JaccAuthorizationRealm and the ignoreBaseDecision property is set to true on the JBossWebRealm, does not properly check the permissions created by the WebPermissionMapping class, which allows remote authenticated users to access arbitrary applications.
Published: 2012-11-23T20:00:00.000Z
Updated: 2024-08-06T18:53:35.669Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4085 |
vulnerable | 2026-06-08 04:59:29.149281 |
Details available
The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.
Published: 2012-11-23T20:00:00.000Z
Updated: 2024-08-06T23:53:32.785Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2493 |
vulnerable | 2026-06-08 04:55:08.260858 |
Details available
The default configuration of the deployment descriptor (aka web.xml) in picketlink-sts.war in (1) the security_saml quickstart, (2) the webservice_proxy_security quickstart, (3) the web-console application, (4) the http-invoker application, (5) the gpd-deployer application, (6) the jbpm-console application, (7) the contract application, and (8) the uddi-console application in JBoss Enterprise SOA Platform before 5.0.2 contains GET and POST http-method elements, which allows remote attackers to bypass intended access restrictions via a crafted HTTP request.
Published: 2010-08-09T20:00:00.000Z
Updated: 2024-08-07T02:32:16.845Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.