Jboss Schwachstellen

Zeitverlauf

Typ

Application Server Software20

Produkt

JBoss KeyCloak4
JBoss JBoss Application Server3
JBoss RichFaces2
JBoss BRMS1
JBoss AeroGear1

Massnahmen

Official Fix13
Temporary Fix0
Workaround0
Unavailable0
Not Defined7

Ausnutzbarkeit

High2
Functional0
Proof-of-Concept3
Unproven0
Not Defined15

Zugriffsart

Not Defined0
Physical0
Local1
Adjacent1
Network18

Authentisierung

Not Defined0
High0
Low4
None16

Benutzeraktivität

Not Defined0
Required10
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤41
≤55
≤64
≤74
≤84
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤56
≤65
≤74
≤82
≤92
≤100

VulDB

≤10
≤20
≤30
≤43
≤56
≤62
≤73
≤86
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤72
≤81
≤91
≤102

CNA

≤10
≤20
≤30
≤40
≤51
≤61
≤71
≤80
≤90
≤100

Hersteller

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k1
<2k11
<5k8
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploit heute

<1k20
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploitmarktvolumen

🔴 CTI Aktivitäten

Affected Products (14): AeroGear (1), BRMS (1), Enterprise Application Platform (1), Expressions (1), IronJacamar (1), JBoss Application Server (3), JBoss Enterprise (1), KeyCloak (4), Management Console (1), RichFaces (2), Web Console (1), jBPM (1), jbossas (1), seam (1)

VeröffentlichtBaseTempSchwachstelleProdAusMasEPSSCTICVE
15.12.20234.34.1JBoss KeyCloak lowerCaseHostname RedirectApplication Server SoftwareNot DefinedOfficial Fix0.001040.02CVE-2023-6291
12.12.20234.54.5JBoss KeyCloak Incomplete Fix CVE-2020-10748 Cross Site ScriptingApplication Server SoftwareNot DefinedNot Defined0.001140.02CVE-2023-6134
04.12.20234.34.3JBoss KeyCloak WebAuthn erweiterte RechteApplication Server SoftwareNot DefinedNot Defined0.000000.05CVE-2023-6484
12.11.20195.25.1JBoss BRMS Cross Site ScriptingApplication Server SoftwareNot DefinedOfficial Fix0.001120.00CVE-2010-3857
04.11.20195.25.2JBoss AeroGear Reflected Cross Site ScriptingApplication Server SoftwareNot DefinedNot Defined0.000840.04CVE-2014-3649
27.03.20194.84.7JBoss Management Console Cross Site ScriptingApplication Server SoftwareNot DefinedOfficial Fix0.001120.02CVE-2018-10934
18.06.20188.58.4JBoss RichFaces EL Variable Mapper erweiterte RechteApplication Server SoftwareNot DefinedOfficial Fix0.755730.00CVE-2018-12533
18.06.20188.58.5JBoss RichFaces EL Variable Mapper erweiterte RechteApplication Server SoftwareNot DefinedNot Defined0.023020.00CVE-2018-12532
22.05.20187.06.9JBoss jbossas Init Script erweiterte RechteApplication Server SoftwareNot DefinedOfficial Fix0.000440.00CVE-2016-8656
18.10.20176.56.2JBoss KeyCloak CSRF Protection Cross Site Request ForgeryApplication Server SoftwareNot DefinedOfficial Fix0.004320.00CVE-2014-3709

10 weitere Einträge werden nicht mehr angezeigt

🔒 Login Required

You need to signup and login to see more of the remaining 10 results.

◂ ZurückÜbersichtWeiter ▸

Do you need the next level of professionalism?

Upgrade your account now!