Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:continuous_delivery:*:*:*

part: a version: - update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductJboss Enterprise Application Platform (1fae2c77-9ea1-5c62-8727-311c31afda6c)
Edition*
Language*
Software editioncontinuous_delivery
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-1932 vulnerable 2026-06-08 05:52:37.235523 Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss
MEDIUM (6.1)
A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can be bypassed by omitting the tag ending in a less-than character. Browsers may render an invalid html, allowing HTML injection or Cross-Site-Scripting (XSS) attacks.
Published: 2024-11-07T10:00:51.745Z
Updated: 2024-11-07T14:09:26.936Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14317 vulnerable 2026-06-08 05:19:22.963616 Details available
It was found that the issue for security flaw CVE-2019-3805 appeared again in a further version of JBoss Enterprise Application Platform - Continuous Delivery (EAP-CD) introducing regression. An attacker could exploit this by modifying the PID file in /var/run/jboss-eap/ allowing the init.d script to terminate any process as root.
Published: 2021-06-02T11:27:39.000Z
Updated: 2024-08-04T12:39:36.235Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.