| Vulnerability Name |
CVE
CWE
|
CWE |
Severity |
|
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2016-4978)
|
|
|
High
|
|
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2016-7065)
|
|
|
High
|
|
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2018-12022)
|
|
|
High
|
|
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2018-12023)
|
|
|
High
|
|
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2019-10086)
|
|
|
High
|
|
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2021-4104)
|
|
|
High
|
|
Jboss EAP Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-3859)
|
|
|
High
|
|
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3530)
|
|
|
High
|
|
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2183)
|
|
|
High
|
|
Jboss EAP Files or Directories Accessible to External Parties Vulnerability (CVE-2021-3717)
|
|
|
High
|
|
Jboss EAP Improper Handling of Exceptional Conditions Vulnerability (CVE-2018-8039)
|
|
|
High
|
|
Jboss EAP Improper Initialization Vulnerability (CVE-2023-4503)
|
|
|
High
|
|
Jboss EAP Improper Input Validation Vulnerability (CVE-2010-3708)
|
|
|
High
|
|
Jboss EAP Improper Input Validation Vulnerability (CVE-2013-2185)
|
|
|
High
|
|
Jboss EAP Improper Input Validation Vulnerability (CVE-2016-3110)
|
|
|
High
|
|
Jboss EAP Improper Input Validation Vulnerability (CVE-2020-1757)
|
|
|
High
|
|
Jboss EAP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1048)
|
|
|
High
|
|
Jboss EAP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-10234)
|
|
|
High
|
|
Jboss EAP Improper Resource Shutdown or Release Vulnerability (CVE-2025-9784)
|
|
|
High
|
|
Jboss EAP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2021-32027)
|
|
|
High
|
|
Jboss EAP Improper Restriction of XML External Entity Reference Vulnerability (CVE-2019-10172)
|
|
|
High
|
|
Jboss EAP Inadequate Encryption Strength Vulnerability (CVE-2014-0224)
|
|
|
High
|
|
Jboss EAP Incomplete List of Disallowed Inputs Vulnerability (CVE-2018-5968)
|
|
|
High
|
|
Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-7561)
|
|
|
High
|
|
Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-12165)
|
|
|
High
|
|
Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2019-16869)
|
|
|
High
|
|
Jboss EAP Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2020-7238)
|
|
|
High
|
|
Jboss EAP Incorrect Authorization Vulnerability (CVE-2019-14843)
|
|
|
High
|
|
Jboss EAP Incorrect Authorization Vulnerability (CVE-2026-3009)
|
|
|
High
|
|
Jboss EAP Incorrect Privilege Assignment Vulnerability (CVE-2026-3121)
|
|
|
High
|
|
Jboss EAP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2017-2670)
|
|
|
High
|
|
Jboss EAP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-1041)
|
|
|
High
|
|
Jboss EAP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-1336)
|
|
|
High
|
|
Jboss EAP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-0205)
|
|
|
High
|
|
Jboss EAP Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2023-1108)
|
|
|
High
|
|
Jboss EAP Missing Authorization Vulnerability (CVE-2019-10184)
|
|
|
High
|
|
Jboss EAP Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2022-0853)
|
|
|
High
|
|
Jboss EAP Observable Discrepancy Vulnerability (CVE-2022-3143)
|
|
|
High
|
|
Jboss EAP Other Vulnerability (CVE-2014-3490)
|
|
|
High
|
|
Jboss EAP Other Vulnerability (CVE-2019-9513)
|
|
|
High
|
|
Jboss EAP Out-of-bounds Read Vulnerability (CVE-2019-0210)
|
|
|
High
|
|
Jboss EAP Permission Issues Vulnerability (CVE-2016-7066)
|
|
|
High
|
|
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4605)
|
|
|
High
|
|
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-4608)
|
|
|
High
|
|
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5629)
|
|
|
High
|
|
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2165)
|
|
|
High
|
|
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-5406)
|
|
|
High
|
|
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8656)
|
|
|
High
|
|
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-8657)
|
|
|
High
|
|
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2019-3894)
|
|
|
High
|
|
Jboss EAP Reachable Assertion Vulnerability (CVE-2020-25710)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2016-8610)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2017-12174)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2019-14888)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2019-19343)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2020-14384)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2020-25644)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2021-3629)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2021-3690)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2023-44487)
|
|
|
High
|
|
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2024-1635)
|
|
|
High
|
|
Jboss EAP Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-12617)
|
|
|
High
|
|
Jboss EAP Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2018-1000180)
|
|
|
High
|
|
Jboss EAP Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Vulnerability (CVE-2017-7536)
|
|
|
High
|
|
Jboss EAP Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') Vulnerability (CVE-2019-10174)
|
|
|
High
|
|
Jboss EAP XML Injection (aka Blind XPath Injection) Vulnerability (CVE-2018-1000632)
|
|
|
High
|
|
JBoss HttpAdaptor JMXInvokerServlet
|
|
|
High
|
|
JBoss InvokerTransformer Remote Code Execution
|
|
|
High
|
|
JBoss JMX Console Unrestricted Access
|
|
|
High
|
|
JBoss JMX management console
|
|
|
High
|
|
JBoss Seam framework remote code execution
|
|
|
High
|
|
JBoss Seam remoting vulnerabilities
|
|
|
High
|
|
JBoss ServerInfo MBean
|
|
|
High
|
|
JBoss Server MBean
|
|
|
High
|
|
JBoss Web Console JMX Invoker
|
|
|
High
|
