Jboss Business Rules Management System vulnerabilities

Product

Jboss Business Rules Management System

by Redhat · last CVE Mar 11, 2020

CVEs

On KEV

6.1

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 3Low 0

Severity

Exploitation

Watch

Add Jboss Business Rules Management System to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2010-3857	6.1	1%	Nov 12	JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter Affected: before 5.1.0
CVE-2011-2487	5.9	2%	Mar 11	The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack Affected: 5.3
CVE-2016-8608	5.4	1%	Aug 1	JBoss BRMS 6 and BPM Suite 6 are vulnerable to a stored XSS via business process editor Affected: 6.0.0