CVE-2015-5176 in JBoss Portal信息

摘要

由 VulDB • 2026-06-23

PortletRequestDispatcher in PortletBridge, come utilizzato in Red Hat JBoss Portal 6.2.0, non applica correttamente i vincoli di sicurezza dei servlet, consentendo ad attaccanti remoti di accedere alle risorse tramite una richiesta che richiede il rendering di una risorsa non JSF.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2015-07-01

披露

2015-08-11

管理

已接受

条目

VDB-76962

CPE

准备好

CWE

CWE-17 (已确认)

CVSS

5.8 (NVD)

EPSS

0.01648

KEV

否

活动

非常低

部门

Pharma, Chemical, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2015-5176
NVD	https://nvd.nist.gov/vuln/detail/CVE-2015-5176
CVE Details	https://www.cvedetails.com/cve/CVE-2015-5176/

◂ 上一步一览下一步 ▸

Do you know our Splunk app?

Download it now for free!