Jboss Enterprise Application Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:jboss_enterprise_application_platform:8.0:*:*:*:*:*:*:*
part: a version: 8.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Jboss Enterprise Application Platform (1fae2c77-9ea1-5c62-8727-311c31afda6c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-3009 |
vulnerable | 2026-06-08 08:01:17.310753 |
Org.keycloak/keycloak-services: improper enforcement of disabled identity provider in identitybrokerservice (authentication bypass)
HIGH (8.1)
A security flaw in the IdentityBrokerService.performLogin endpoint of Keycloak allows authentication to proceed using an Identity Provider (IdP) even after it has been disabled by an administrator. An attacker who knows the IdP alias can reuse a previously generated login request to bypass the administrative restriction. This undermines access control enforcement and may allow unauthorized authentication through a disabled external provider.
Published: 2026-03-05T18:27:43.294Z
Updated: 2026-07-15T01:10:09.461Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1102 |
vulnerable | 2026-06-08 06:25:39.259874 |
Jberet: jberet-core logging database credentials
MEDIUM (6.5)
A vulnerability was found in jberet-core logging. An exception in 'dbProperties' might display user credentials such as the username and password for the database-connection.
Published: 2024-04-25T16:24:30.245Z
Updated: 2025-11-11T15:53:53.730Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10234 |
vulnerable | 2026-06-08 06:22:03.835369 |
Wildfly: wildfly vulnerable to cross-site scripting (xss)
MEDIUM (6.1)
A vulnerability was found in Wildfly, where a user may perform Cross-site scripting in the Wildfly deployment system. This flaw allows an attacker or insider to execute a deployment with a malicious payload, which could trigger undesired behavior against the server.
Published: 2024-10-22T13:17:57.891Z
Updated: 2025-11-11T16:05:02.693Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.