Red Hat JBoss Enterprise Application Platform (EAP) 7.1
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1:*:*:*:*:*:*:*
part: a version: 7.1 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Jboss Enterprise Application Platform (1fae2c77-9ea1-5c62-8727-311c31afda6c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-8088 |
vulnerable | 2026-06-08 05:12:05.176658 |
Details available
org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.
Published: 2018-03-20T00:00:00.000Z
Updated: 2024-08-05T06:46:12.940Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5968 |
vulnerable | 2026-06-08 05:11:53.157471 |
Details available
FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist.
Published: 2018-01-22T04:00:00.000Z
Updated: 2024-08-05T05:47:56.169Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1067 |
vulnerable | 2026-06-08 05:11:16.814012 |
Details available
MEDIUM (5.4)
In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and validation of user input before the input is used as part of an HTTP header value.
Published: 2018-05-21T17:00:00.000Z
Updated: 2024-08-05T03:51:47.329Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14642 |
vulnerable | 2026-06-08 05:10:53.188635 |
Details available
MEDIUM (5.3)
An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests.
Published: 2018-09-18T13:00:00.000Z
Updated: 2024-08-05T09:38:12.577Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7536 |
vulnerable | 2026-06-08 05:09:56.469205 |
Details available
In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an attacker may be able to validate an invalid instance and access the private member value via ConstraintViolation#getInvalidValue().
Published: 2018-01-10T15:00:00.000Z
Updated: 2024-09-16T17:32:38.135Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7525 |
vulnerable | 2026-06-08 05:09:56.423014 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17485 |
vulnerable | 2026-06-08 05:09:09.491927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.