Known vulnerabilities in JBoss Application Server

Vendor: Red Hat Inc.

Software: JBoss Application Server

Software CPE: cpe:2.3:a:red_hat:jboss_application_server:*:*:*:*:*:*:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 11

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU41113 - Exposure of sensitive information to an unauthorized actor CVE-2012-1094	CWE-200	Medium	No	No	7.1.1	10.03.2020	SB2020031072
#VU34956 - Improper Privilege Management CVE-2012-2312	CWE-269	Low	No	No	-	18.12.2019	SB2019121848
#VU35036 - Cross-Site Request Forgery (CSRF) CVE-2011-3609	CWE-352	Medium	No	No	-	26.11.2019	SB2019112633
#VU35038 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2011-3606	CWE-79	Low	No	No	-	26.11.2019	SB2019112633
#VU10563 - Cross-Site Request Forgery (CSRF) CVE-2016-7034	CWE-352	Low	No	No	-	14.02.2018	SB2016090601
#VU10564 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2016-6343	CWE-79	Low	No	No	-	13.02.2018	SB2017031624
#VU10382 - Resource exhaustion CVE-2017-12174	CWE-400	Low	No	No	-	06.02.2018	SB2018020602 SB2018020603 SB2018020607 and 3 more
#VU10381 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2018-1041	CWE-835	Low	Available	No	-	06.02.2018	SB2018020602 SB2018020603 SB2018020607 and 2 more
#VU9756 - Deserialization of Untrusted Data CVE-2017-7504	CWE-502	High	No	No	-	26.12.2017	SB2017051911
#VU9577 - Use After Free CVE-2017-15412	CWE-416	High	Available	No	-	07.12.2017	SB2017120705 SB2017120707 SB2017121304 and 16 more
#VU7202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2017-2595	CWE-22	Low	No	No	-	26.06.2017	SB2017062606 SB2017060710 SB2017062033