Redhat Jboss Business Rules Management System vulnerabilities

3 vulnerabilities

Known vulnerabilities in Redhat Jboss Business Rules Management System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2016-8608red hatbrms+2
EPSS score
1.26%
JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplete fix for CVE-2016-5398. Remote, authenticated attackers that have privileges to create business processes can store scripts in them, which are not properly sanitized before showing to other users, including admins.5.9CVE-2011-2487apachecxf+12
EPSS score
1.76%
The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.6.1CVE-2010-3857jboss brmsjboss brms+1
EPSS score
0.85%
JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter.