[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhEVrgYZI2FGygFq49J4EcczgGK_3UqS55cvpH8HDBBA":3,"g5a-ex:redhat\u002Fjboss_enterprise_brms_platform@*":145,"g5a-family:redhat\u002Fjboss_enterprise_brms_platform":147},{"success":4,"data":5},true,{"product":6,"versions":48,"topVulnerabilitiesByEpss":63,"kevVulnerabilities":122,"seoMetadata":123,"meta":142},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":47},"redhat","jboss_enterprise_brms_platform",14,23,0,"2017-11-09",[14,18,21,23,26,28,30,33,35,37,39,41,43,45],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"5.0.0",3,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"5.0.1",1,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"5.0.2",{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"5.1.0",2,{"version":27,"cve_count":25,"kev_count":11,"has_kev":17},"5.2.0",{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},"5.3.0",{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},"5.3.1",4,{"version":34,"cve_count":32,"kev_count":11,"has_kev":17},"6.0.0",{"version":36,"cve_count":20,"kev_count":11,"has_kev":17},"6.0.1",{"version":38,"cve_count":20,"kev_count":11,"has_kev":17},"6.0.2",{"version":40,"cve_count":20,"kev_count":11,"has_kev":17},"6.0.3",{"version":42,"cve_count":20,"kev_count":11,"has_kev":17},"6.1",{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},"6.1.2",{"version":46,"cve_count":20,"kev_count":11,"has_kev":17},"6.3","Jboss Enterprise Brms Platform by Redhat is a technology product with 14 tracked versions and 23 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[49,50,51,52,53,54,55,56,57,58,59,60,61,62],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":25,"kev_count":11,"has_kev":17},{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},{"version":34,"cve_count":32,"kev_count":11,"has_kev":17},{"version":36,"cve_count":20,"kev_count":11,"has_kev":17},{"version":38,"cve_count":20,"kev_count":11,"has_kev":17},{"version":40,"cve_count":20,"kev_count":11,"has_kev":17},{"version":42,"cve_count":20,"kev_count":11,"has_kev":17},{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},{"version":46,"cve_count":20,"kev_count":11,"has_kev":17},[64,71,79,85,92,97,103,108,112,116],{"cveId":65,"description":66,"publishedDate":12,"cvssScore":67,"cvssVersion":68,"severity":69,"isKev":17,"epssScore":70},"CVE-2015-7501","Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift\u002FxPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.",9.8,"v3.0","Critical",0.85562,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":76,"severity":77,"isKev":17,"epssScore":78},"CVE-2015-0250","XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.","2015-03-24",6.4,"v2","Medium",0.16564,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":76,"severity":77,"isKev":17,"epssScore":84},"CVE-2012-0874","The (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 do not require authentication by default in certain profiles, which might allow remote attackers to invoke MBean methods and execute arbitrary code via unspecified vectors.  NOTE: this issue can only be exploited when the interceptor is not properly configured with a \"second layer of authentication,\" or when used in conjunction with other vulnerabilities that bypass this second layer.","2013-02-05",6.8,0.15561,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":76,"severity":90,"isKev":17,"epssScore":91},"CVE-2013-2186","The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.","2013-10-28",7.5,"High",0.12666,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":89,"cvssVersion":76,"severity":90,"isKev":17,"epssScore":96},"CVE-2013-2165","ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBoss SOA Platform through 4.3.0 CP05 and 5.x through 5.3.1, Red Hat JBoss Portal through 4.3 CP07 and 5.x through 5.2.2, and Red Hat JBoss Operations Network through 2.4.2 and 3.x through 3.1.2 does not restrict the classes for which deserialization methods can be called, which allows remote attackers to execute arbitrary code via crafted serialized data.","2013-07-23",0.12662,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":67,"cvssVersion":101,"severity":69,"isKev":17,"epssScore":102},"CVE-2016-4999","SQL injection vulnerability in the getStringParameterSQL method in main\u002Fjava\u002Forg\u002Fdashbuilder\u002Fdataprovider\u002Fsql\u002Fdialect\u002FDefaultDialect.java in Dashbuilder before 0.6.0.Beta1 allows remote attackers to execute arbitrary SQL commands via a data set lookup filter in the (1) Data Set Authoring or (2) Displayer editor UI.","2016-08-05","v3.1",0.03653,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":89,"cvssVersion":76,"severity":90,"isKev":17,"epssScore":107},"CVE-2011-4605","The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.2, and BRMS Platform before 5.3.0 do not properly restrict write access, which allows remote attackers to add, delete, or modify items in a JNDI tree via unspecified vectors.","2012-11-23",0.03521,{"cveId":109,"description":110,"publishedDate":106,"cvssScore":83,"cvssVersion":76,"severity":77,"isKev":17,"epssScore":111},"CVE-2011-4085","The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method.  NOTE: this vulnerability exists because of a CVE-2010-0738 regression.",0.0294,{"cveId":113,"description":114,"publishedDate":82,"cvssScore":32,"cvssVersion":76,"severity":77,"isKev":17,"epssScore":115},"CVE-2012-3369","The CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web Platform (EWP) before 5.2.0, BRMS Platform before 5.3.1, and SOA Platform before 5.3.1 allows remote attackers to gain privileges of the previous user via a null password, which causes the previous user's password to be used.",0.02685,{"cveId":117,"description":118,"publishedDate":119,"cvssScore":120,"cvssVersion":76,"severity":77,"isKev":17,"epssScore":121},"CVE-2013-4210","The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other products allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors.","2013-10-01",5,0.02672,[],{"title":124,"metaDescription":125,"keywords":126,"structuredData":127},"Jboss Enterprise Brms Platform by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Jboss Enterprise Brms Platform by Redhat covering 14 versions with 23 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Jboss Enterprise Brms Platform vulnerabilities, Jboss Enterprise Brms Platform security, Jboss Enterprise Brms Platform CVE, Redhat Jboss Enterprise Brms Platform, Jboss Enterprise Brms Platform threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":128,"@type":129,"name":130,"description":125,"url":131,"manufacturer":132,"applicationCategory":136,"softwareVersion":137,"mainEntity":138},"https:\u002F\u002Fschema.org","SoftwareApplication","Jboss Enterprise Brms Platform","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fjboss_enterprise_brms_platform",{"@type":133,"name":134,"url":135},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","14 versions tracked",{"@type":139,"name":140,"description":141,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Jboss Enterprise Brms Platform Security Vulnerabilities","Security vulnerabilities affecting Jboss Enterprise Brms Platform by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":143,"apiVersion":144},"2026-10-17T15:07:19.109Z","3.0",{"rows":146,"total":11,"capped":17,"failed":11},[],[]]