CVE-2006-5750: JBoss Application Server

High severity, CVSS 7.5. EPSS: 13.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the DeploymentFileRepository class in JBoss Application Server (jbossas) 3.2.4 through 4.0.5 allows remote authenticated users to read or modify arbitrary files, and possibly execute arbitrary code, via unspecified vectors related to the console manager.

Affected products

• JBoss JBoss Application Server: version 3.2.5_final only; version 3.2.6_final only; version 3.2.7_final only; version 3.2.8.sp1 only; version 3.2.8_final only; version 4.0.0_final only; …

Published 2006-11-27. Last modified 2026-06-16.