Red Hat JBoss Enterprise Soa Platform vulnerabilities

17 CVEs affecting Red Hat JBoss Enterprise Soa Platform, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-2487, published 2020-03-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-7501, published 2017-11-09. Critical severity, CVSS 9.8. EPSS: 85.6% chance of exploitation in the next 30 days. Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service…
CVE-2013-2165, published 2013-07-23. High severity, CVSS 7.5. EPSS: 12.7% chance of exploitation in the next 30 days. ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise…
CVE-2012-5575, published 2013-08-19. Medium severity, CVSS 6.4. EPSS: 6.3% chance of exploitation in the next 30 days. Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite…
CVE-2011-4605, published 2012-11-23. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and…
CVE-2010-3708, published 2010-12-30. High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days. The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports…
CVE-2011-4085, published 2012-11-23. Medium severity, CVSS 6.8. EPSS: 2.9% chance of exploitation in the next 30 days. The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access…
CVE-2013-4210, published 2013-10-01. Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days. The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other…
CVE-2011-1483, published 2013-07-29. Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days. wsf/common/DOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA…
CVE-2014-3518, published 2014-07-22. Medium severity, CVSS 6.8. EPSS: 2.6% chance of exploitation in the next 30 days. jmx-remoting.sar in JBoss Remoting, as used in Red Hat JBoss Enterprise Application Platform (JEAP) 5.2.0, Red Hat JBoss BRMS 5.3.1, Red Hat JBoss Portal Platform 5.2.2, and Red Hat JBoss SOA…
CVE-2011-2196, published 2011-07-27. Medium severity, CVSS 6.8. EPSS: 2.6% chance of exploitation in the next 30 days. jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or…

Latest

CVE-2011-2487, published 2020-03-11. Medium severity, CVSS 5.9. EPSS: 1.8% chance of exploitation in the next 30 days. The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.
CVE-2012-2377, published 2012-11-23. Low severity, CVSS 3.3. EPSS: 1.4% chance of exploitation in the next 30 days. JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups…
CVE-2012-1167, published 2012-11-23. Medium severity, CVSS 4.6. EPSS: 1.6% chance of exploitation in the next 30 days. The JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2.2, Web Platform before 5.1.2, BRMS Platform before 5.3.0, and SOA Platform before 5.3.0, when the…