Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:6.0.0:*:*:*:*:*:*:*

part: a version: 6.0.0 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductJboss Enterprise Brms Platform (3ceb9ffb-0f6d-5d40-91fc-62dc3ade44ba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-5401 vulnerable 2026-06-08 05:07:56.935009 Details available
Cross-site request forgery (CSRF) vulnerability in Red Hat JBoss BRMS and BPMS 6 allows remote attackers to hijack the authentication of users for requests that modify instances via a crafted web page.
Published: 2017-04-20T21:00:00.000Z
Updated: 2024-08-06T01:00:59.964Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4999 vulnerable 2026-06-08 05:07:55.908360 Details available
SQL injection vulnerability in the getStringParameterSQL method in main/java/org/dashbuilder/dataprovider/sql/dialect/DefaultDialect.java in Dashbuilder before 0.6.0.Beta1 allows remote attackers to execute arbitrary SQL commands via a data set lookup filter in the (1) Data Set Authoring or (2) Displayer editor UI.
Published: 2016-08-05T15:00:00.000Z
Updated: 2024-08-06T00:46:40.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7501 vulnerable 2026-06-08 05:07:01.181739 Details available
Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
Published: 2017-11-09T00:00:00.000Z
Updated: 2024-08-06T07:51:28.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6468 vulnerable 2026-06-08 05:04:57.039260 Details available
JBoss Drools, Red Hat JBoss BRMS before 6.0.1, and Red Hat JBoss BPM Suite before 6.0.1 allows remote authenticated users to execute arbitrary Java code via a (1) MVFLEX Expression Language (MVEL) or (2) Drools expression.
Published: 2014-04-10T14:00:00.000Z
Updated: 2024-08-06T17:39:01.441Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.