Red Hat JBoss Enterprise Application Platform (EAP) 6.0.1
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.1:*:*:*:*:*:*:*
part: a version: 6.0.1 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Jboss Enterprise Application Platform (1fae2c77-9ea1-5c62-8727-311c31afda6c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-3481 |
vulnerable | 2026-06-08 05:05:32.884412 |
Details available
org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application Platform (JEAP) before 6.2.4 enables entity expansion, which allows remote attackers to read arbitrary files via unspecified vectors, related to an XML External Entity (XXE) issue.
Published: 2014-07-07T14:00:00.000Z
Updated: 2024-08-06T10:43:06.387Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0058 |
vulnerable | 2026-06-08 05:05:11.024286 |
Details available
The security audit functionality in Red Hat JBoss Enterprise Application Platform (EAP) 6.x before 6.2.1 logs request parameters in plaintext, which might allow local users to obtain passwords by reading the log files.
Published: 2014-02-26T15:00:00.000Z
Updated: 2024-08-06T09:05:38.272Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2133 |
vulnerable | 2026-06-08 05:03:58.540082 |
Details available
The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) before 6.2.0, does not properly enforce the method level restrictions for JAX-WS Service endpoints, which allows remote authenticated users to access otherwise restricted JAX-WS handlers by leveraging permissions to the EJB class.
Published: 2013-12-06T17:00:00.000Z
Updated: 2024-08-06T15:27:40.919Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1921 |
vulnerable | 2026-06-08 05:03:57.285748 |
Details available
PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file.
Published: 2013-09-28T19:00:00.000Z
Updated: 2024-08-06T15:20:37.072Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5629 |
vulnerable | 2026-06-08 05:02:57.616374 |
Details available
The default configuration of the (1) LdapLoginModule and (2) LdapExtLoginModule modules in JBoss Enterprise Application Platform (EAP) 4.3.0 CP10, 5.2.0, and 6.0.1, and Enterprise Web Platform (EWP) 5.2.0 allow remote attackers to bypass authentication via an empty password.
Published: 2013-03-12T22:00:00.000Z
Updated: 2024-08-06T21:14:15.932Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.