RH
Product
Red Hat JBoss Enterprise Application Platform 6
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 6Low 0
Watch
Add Red Hat JBoss Enterprise Application Platform 6 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-1102 | 6.5 | Apr 25 | Jberet: jberet-core logging database credentials Affected: All versions, or not specified |
| CVE-2023-3629 | 6.5 | Dec 18 | Infinispan: non-admins should not be able to get cache config via rest api Affected: All versions, or not specified |
| CVE-2023-3628 | 6.5 | Dec 18 | Infispan: rest bulk ops don't check permissions Affected: All versions, or not specified |
| CVE-2023-1932 | 6.1 | Nov 7 | Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss Affected: All versions, or not specified |
| CVE-2023-6717 | 6.0 | Apr 25 | Keycloak: xss via assertion consumer service url in saml post-binding flow Affected: All versions, or not specified |
| CVE-2022-4245 | 4.3 | Sep 25 | Codehaus-plexus: xml external entity (xxe) injection Affected: All versions, or not specified |
Showing 6