Jboss Application Server
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:jboss_application_server:7.0.0:*:*:*:*:*:*:*
part: a version: 7.0.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Jboss Application Server (8508b904-d151-57cc-b8ee-822cd574e5c3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-3609 |
vulnerable | 2026-06-08 04:59:26.607220 |
Details available
A CSRF issue was found in JBoss Application Server 7 before 7.1.0. JBoss did not properly restrict access to the management console information (for example via the "Access-Control-Allow-Origin" HTTP access control flag). This can lead to unauthorized information leak if a user with admin privileges visits a specially-crafted web page provided by a remote attacker.
Published: 2019-11-26T02:03:48.000Z
Updated: 2024-08-06T23:37:48.463Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3606 |
vulnerable | 2026-06-08 04:59:26.600037 |
Details available
A DOM based cross-site scripting flaw was found in the JBoss Application Server 7 before 7.1.0 Beta 1 administration console. A remote attacker could provide a specially-crafted web page and trick the valid JBoss AS user, with the administrator privilege, to visit it, which would lead into the DOM environment modification and arbitrary HTML or web script execution.
Published: 2019-11-26T01:43:14.000Z
Updated: 2024-08-06T23:37:48.614Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.