Red Hat JBoss Portal vulnerabilities

6 CVEs affecting Red Hat JBoss Portal, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-2487, published 2020-03-11.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-7501, published 2017-11-09. Critical severity, CVSS 9.8. EPSS: 85.6% chance of exploitation in the next 30 days. Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service…
• CVE-2011-2487, published 2020-03-11. Medium severity, CVSS 5.9. EPSS: 1.8% chance of exploitation in the next 30 days. The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.
• CVE-2015-5176, published 2015-08-11. Medium severity, CVSS 5.8. EPSS: 1.6% chance of exploitation in the next 30 days. The PortletRequestDispatcher in PortletBridge, as used in Red Hat JBoss Portal 6.2.0, does not properly enforce the security constraints of servlets, which allows remote attackers to gain access to…
• CVE-2014-0245, published 2020-01-02. Medium severity, CVSS 5.9. EPSS: 1% chance of exploitation in the next 30 days. It was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp was not thread safe. For a specific WSRP endpoint, under high-concurrency scenarios or scenarios where…
• CVE-2012-5626, published 2020-01-23. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in…
• CVE-2013-6495, published 2019-12-11. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. JBossWeb Bayeux has reflected XSS