Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 206

Export CSV
CVE-2017-2674

business-central: Multiple stored XSS in task and process filters

JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in Business Central. The flaw is due to lack of sanitation of user input when creating new lists. Remote, authenticated attackers that have privileges to create lists can store scripts in them, which are not properly sanitized before showing to other users, including admins.

CVSS 3.0 · 6.1 Medium EPSS 1.3% KEV · Not listed
Vendors
Redhat
Products
Jboss Bpm Suite Jboss Bpms Jboss Enterprise Brms Platform
CVE-2016-9606

Resteasy: Yaml unmarshalling vulnerable to RCE

JBoss RESTEasy before version 3.1.2 could be forced into parsing a request with YamlProvider, resulting in unmarshalling of potentially untrusted data which could allow an attacker to execute arbitrary code with RESTEasy application permissions.

CVSS 3.0 · 8.1 High EPSS 6.0% KEV · Not listed
Vendors
Redhat
Products
Jboss Bpms Jboss Enterprise Application Platform Jboss Enterprise Brms Platform and 1 more
CVE-2016-8608

Stored XSS in business process editor

JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor. The flaw is due to an incomplete fix for CVE-2016-5398. Remote, authenticated attackers that have privileges to create business processes can store scripts in them, which are not properly sanitized before showing to other users, including admins.

CVSS 3.0 · 5.4 Medium EPSS 1.3% KEV · Not listed
Vendors
Redhat
Products
Jboss Bpm Suite Jboss Bpms Jboss Business Rules Management System and 1 more
CVE-2016-7041

Workbench: Path traversal vulnerability

Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and retrieve arbitrary files from the affected host.

CVSS 3.0 · 6.5 Medium EPSS 4.0% KEV · Not listed
Vendors
Redhat
Products
Jboss Bpms Jboss Brms Jboss Drools and 1 more
CVE-2011-2487

jbossws: Prone to Bleichenbacher attack against to be distributed symmetric key

The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

CVSS 3.1 · 5.9 Medium EPSS 1.8% KEV · Not listed
Vendors
Apache Redhat
Products
Cxf Wss4j Jboss Business Rules Management System and 9 more