Red Hat Mod Cluster vulnerabilities

3 CVEs affecting Red Hat Mod Cluster, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-4459, published 2017-04-12.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-4459, published 2017-04-12. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.
• CVE-2012-1154, published 2012-10-22. Medium severity, CVSS 4.3. EPSS: 2.6% chance of exploitation in the next 30 days. mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when "ROOT" is set to excludedContexts, exposes the root context of the server,…
• CVE-2015-0298, published 2015-08-24. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2.Alpha1 allows remote attackers to inject arbitrary web script or HTML via a crafted MCMP message.