Redhat Jboss Enterprise Brms Platform vulnerabilities, page 2

23 vulnerabilities

Known vulnerabilities in Redhat Jboss Enterprise Brms Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2011-4610redhatjboss_communications_platform+3
EPSS score
2.17%
JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a "surrogate pair character" that is "at the boundary of an internal buffer."4.3CVE-2011-4575redhatjboss_enterprise_application_platform+2
EPSS score
1.79%
Cross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.6.8CVE-2011-4085redhatjboss_enterprise_application_platform+3KEV
EPSS score
2.94%
The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.