CVE-2005-2158: JBoss Jbpm

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A regression error in the embedded HSQLDB in JBoss jBPM 2.0 allows remote attackers to execute arbitrary comands, a re-introduction of a vulnerability that was originally identified by CVE-2003-0845.

Affected products

• JBoss Jbpm: version 2.0 only

Published 2005-07-06. Last modified 2026-06-16.