Redhat Jboss Operations Network vulnerabilities, page 2

24 vulnerabilities

Known vulnerabilities in Redhat Jboss Operations Network, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

3.5CVE-2011-4573redhatjboss_operations_network
EPSS score
0.81%
Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update from the group connection properties history, which prevents such activities from being recorded in the audit trail.4.3CVE-2011-3206redhatjboss_operations_network+1
EPSS score
1.09%
Multiple cross-site scripting (XSS) vulnerabilities in the administration interface in RHQ 4.2.0, as used in JBoss Operations Network (aka JON or JBoss ON) before 3.0, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.8CVE-2010-0737red hatjboss+1
EPSS score
0.53%
A missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not properly check permissions, which allows JBoss ON users to perform management tasks and configuration changes with the privileges of the administrator user.7.3CVE-2019-3834redhatjboss_operations_network+1
EPSS score
1.01%
It was found that the fix for CVE-2014-0114 had been reverted in JBoss Operations Network 3 (JON). This flaw allows attackers to manipulate ClassLoader properties on a vulnerable server. Exploits that have been published rely on ClassLoader properties that are exposed such as those in JON 3. Additional information can be found in the Red Hat Knowledgebase article: https://access.redhat.com/site/solutions/869353. Note that while multiple products released patches for the original CVE-2014-0114 flaw, the reversion described by this CVE-2019-3834 flaw only occurred in JON 3.