Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2013-6468

Drools: Remote Java Code Execution in MVEL

JBoss Drools, Red Hat JBoss BRMS before 6.0.1, and Red Hat JBoss BPM Suite before 6.0.1 allows remote authenticated users to execute arbitrary Java code via a (1) MVFLEX Expression Language (MVEL) or (2) Drools expression.

CVSS 2.0 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Redhat
Products
Jboss Bpm Suite Jboss Bpms Jboss Brms and 2 more
CVE-2016-7041

Workbench: Path traversal vulnerability

Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and retrieve arbitrary files from the affected host.

CVSS 3.0 · 6.5 Medium EPSS 4.0% KEV · Not listed
Vendors
Redhat
Products
Jboss Bpms Jboss Brms Jboss Drools and 1 more