Redhat Jboss Enterprise Application Platform (EAP) 6
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6:*:*:*:*:*:*:*
part: a version: 6 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Jboss Enterprise Application Platform (1fae2c77-9ea1-5c62-8727-311c31afda6c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-3629 |
vulnerable | 2026-06-08 06:09:40.040554 |
Infinispan: non-admins should not be able to get cache config via rest api
MEDIUM (4.3)
A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.
Published: 2023-12-18T13:43:07.770Z
Updated: 2025-11-07T10:41:28.830Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3628 |
vulnerable | 2026-06-08 06:09:40.038239 |
Infispan: rest bulk ops don't check permissions
MEDIUM (6.5)
A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.
Published: 2023-12-18T13:43:07.750Z
Updated: 2025-11-07T10:41:24.777Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1304 |
vulnerable | 2026-06-08 05:11:17.600790 |
Details available
The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constraint definition. This caused the constraint to be ignored. It was, therefore, possible for unauthorised users to gain access to web application resources that should have been protected. Only security constraints with a URL pattern of the empty string were affected.
Published: 2018-02-28T20:00:00.000Z
Updated: 2024-09-17T01:35:47.135Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.