Redhat Jboss Enterprise Portal Platform vulnerabilities, page 2

22 vulnerabilities

Known vulnerabilities in Redhat Jboss Enterprise Portal Platform, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2011-4580redhatjboss_enterprise_portal_platform
EPSS score
1.00%
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Enterprise Portal Platform before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.6.8CVE-2011-4085redhatjboss_enterprise_application_platform+3KEV
EPSS score
2.94%
The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.