Sploitus

15 exploited vulnerabilities in Red Hat Jboss Enterprise Application Platform

Vulnerabilities with publicly known exploits

Vendors
Red Hat, Apache, Centos, Debian, Alt Linux, Astra Linux
With known exploits
15
Affected Redhat Jboss Enterprise Application Platform versions
All versions
Affected Redhat Data Grid versions
= 6.0.0
Affected Redhat Jboss A-mq versions
= 6.0.0
Affected Redhat Jboss Bpm Suite versions
= 6.0.0
Affected Redhat Jboss Data Virtualization versions
= 5.0.0, 6.0.0
Affected Redhat Jboss Enterprise Brms Platform versions
= 5.0.0, 6.0.0
Affected Redhat Jboss Enterprise Soa Platform versions
= 5.0.0
Affected Redhat Jboss Enterprise Web Server versions
= 3.0.0

Vulnerabilities with exploits

Highest CVSS first — 12 of these already have exploit code on Sploitus

CVE-2017-12149 14 exploits
CVSS 10.0 CRITICAL 2017-08-30
Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_PlatformJBoss Scanner
CVE-2015-7501 9 exploits
CVSS 10.0 CRITICAL 2015-11-06FIX AVAILABLE
osv-java-pocExploit for Deserialization of Untrusted Data in Ibm Sterling_B2B_Integrator
CVE-2017-15095 2 exploits
CVSS 9.8 CRITICAL 2017-11-16
Exploit for Incomplete List of Disallowed Inputs in Fasterxml Jackson-DatabindExploit for Incomplete List of Disallowed Inputs in Fasterxml Jackson-Databind
CVE-2016-7065 3 exploits
CVSS 8.8 HIGH 2016-10-13FIX AVAILABLE
Red Hat JBoss EAP - Deserialization of Untrusted Data VulnerabilityRed Hat JBoss EAP - Deserialization of Untrusted Data
CVE-2023-3223
CVSS 7.5 HIGH 2023-09-27
CVE-2016-8610 1 exploit
CVSS 7.5 HIGH 2016-10-24
Exploit for Uncontrolled Resource Consumption in Openssl
CVE-2012-0874 2 exploits
CVSS 6.8 MEDIUM 2013-02-05FIX AVAILABLE
EMC Data Protection Advisor DPA Illuminator - EJBInvokerServlet Remote Code ExecutionJBoss Enterprise Application Platform 多个安全绕过漏洞(CVE-2012-0874)
CVE-2010-1871 8 exploits
CVSS 6.8 MEDIUM 2010-08-04FIX AVAILABLE
Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_PlatformJBoss Seam 2 Remote Command Execution
CVE-2019-15999 4 exploits
CVSS 6.3 MEDIUM 2020-01-02
Cisco DCNM JBoss 10.4 - Credential Leakage ExploitCisco DCNM JBoss 10.4 - Credential Leakage
CVE-2025-2251
CVSS 6.2 MEDIUM 2025-04-07
CVE-2010-1429 8 exploits
CVSS 5.0 MEDIUM 2010-04-28FIX AVAILABLE
JBoss ScannerJBoss Status Servlet Information Gathering
CVE-2010-0738 30 exploits
CVSS 5.0 MEDIUM 2010-04-28FIX AVAILABLE
JBoss ScannerVulmap - Web Vulnerability Scanning And Verification Tools
CVE-2010-1428 4 exploits
CVSS 5.0 MEDIUM 2010-04-26FIX AVAILABLE
JBoss ScannerVulmap - Web Vulnerability Scanning And Verification Tools
CVE-2008-3273 6 exploits
CVSS 5.0 MEDIUM 2008-08-10FIX AVAILABLE
JBoss ScannerJBoss Status Servlet Information Gathering
CVE-2015-1849
CVSS 4.3 MEDIUM 2017-09-19FIX AVAILABLE