Jboss Enterprise Web Platform

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:jboss_enterprise_web_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductJboss Enterprise Web Platform (6c58eabb-9423-5f03-ba12-b9f333adaa0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1167 vulnerable 2026-06-08 05:00:47.939032 Details available
The JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2.2, Web Platform before 5.1.2, BRMS Platform before 5.3.0, and SOA Platform before 5.3.0, when the server is configured to use the JaccAuthorizationRealm and the ignoreBaseDecision property is set to true on the JBossWebRealm, does not properly check the permissions created by the WebPermissionMapping class, which allows remote authenticated users to access arbitrary applications.
Published: 2012-11-23T20:00:00.000Z
Updated: 2024-08-06T18:53:35.669Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4610 vulnerable 2026-06-08 04:59:32.276764 Details available
JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a "surrogate pair character" that is "at the boundary of an internal buffer."
Published: 2014-02-10T23:00:00.000Z
Updated: 2024-08-07T00:09:19.373Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.