CVE-2011-1096: redhat jboss_enterprise_portal_platform Cryptographic Issues
Vulnerability summary
CVE-2011-1096 is a medium (CVSS 5.0) Cryptographic Issues vulnerability in redhat jboss_enterprise_portal_platform. EPSS estimates a 2.59% chance of exploitation in the next 30 days, higher than 85.2% of scored vulnerabilities.
Not severe (CVSS 5, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6Timeline
- 23-11-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss Enterprise Portal Platform before 5.2.2 and other products, when using block ciphers in cipher-block chaining (CBC) mode, allows remote attackers to obtain plaintext data via a chosen-ciphertext attack on SOAP responses, aka "character encoding pattern attack."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
2.59%
Chance of exploitation in the next 30 days
Percentile
85%
Versus all other CVEs
30-day change
No change 0.00 pp
From 2.59% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Redhat1 product
- jboss_enterprise_portal_platform≤ 5.2.1 | 5.0.0 | 5.0.1 | 5.1.0 | 5.1.1 | 5.2.0
1 vendor · 1 product
References
31 links- aktuell.ruhr-uni-bochum.de/pm2011/pm00330.html.deX Refsource MISC
- cxf.apache.org/note-on-cve-2011-1096.htmlX Refsource CONFIRM
- bugzilla.redhat.com/show_bug.cgi?id=681916X Refsource MISC
- coheigea.blogspot.com/2012/04/note-on-cve-2011-1096.htmlX Refsource MISC
Show all 31 references
- dl.acm.org/citation.cfm?id=2046756&dl=ACM&coll=DLX Refsource MISC