[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffstWYpbubpfP6Uz7Ph6QBwazb6Va5OHuFlZiYaRhN1c":3,"g5a-ex:redhat\u002Fjboss_enterprise_portal_platform@*":137,"g5a-family:redhat\u002Fjboss_enterprise_portal_platform":139},{"success":4,"data":5},true,{"product":6,"versions":46,"topVulnerabilitiesByEpss":59,"kevVulnerabilities":114,"seoMetadata":115,"meta":134},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":45},"redhat","jboss_enterprise_portal_platform",12,22,0,"2015-07-16",[14,18,21,23,25,28,30,33,35,38,41,43],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"4.3.0",11,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"5.0.0",9,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"5.0.1",{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},"5.1.0",{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},"5.1.1",8,{"version":29,"cve_count":27,"kev_count":11,"has_kev":17},"5.2.0",{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},"5.2.1",5,{"version":34,"cve_count":27,"kev_count":11,"has_kev":17},"5.2.2",{"version":36,"cve_count":37,"kev_count":11,"has_kev":17},"6.0.0",2,{"version":39,"cve_count":40,"kev_count":11,"has_kev":17},"6.1.0",1,{"version":42,"cve_count":40,"kev_count":11,"has_kev":17},"6.1.1",{"version":44,"cve_count":40,"kev_count":11,"has_kev":17},"6.2.0","Jboss Enterprise Portal Platform by Redhat is a technology product with 12 tracked versions and 22 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[47,48,49,50,51,52,53,54,55,56,57,58],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},{"version":29,"cve_count":27,"kev_count":11,"has_kev":17},{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},{"version":34,"cve_count":27,"kev_count":11,"has_kev":17},{"version":36,"cve_count":37,"kev_count":11,"has_kev":17},{"version":39,"cve_count":40,"kev_count":11,"has_kev":17},{"version":42,"cve_count":40,"kev_count":11,"has_kev":17},{"version":44,"cve_count":40,"kev_count":11,"has_kev":17},[60,68,73,78,85,90,95,100,105,109],{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":65,"severity":66,"isKev":17,"epssScore":67},"CVE-2013-2186","The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance.","2013-10-28",7.5,"v2","High",0.12666,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":64,"cvssVersion":65,"severity":66,"isKev":17,"epssScore":72},"CVE-2013-2165","ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBoss SOA Platform through 4.3.0 CP05 and 5.x through 5.3.1, Red Hat JBoss Portal through 4.3 CP07 and 5.x through 5.2.2, and Red Hat JBoss Operations Network through 2.4.2 and 3.x through 3.1.2 does not restrict the classes for which deserialization methods can be called, which allows remote attackers to execute arbitrary code via crafted serialized data.","2013-07-23",0.12662,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":64,"cvssVersion":65,"severity":66,"isKev":17,"epssScore":77},"CVE-2013-2185","The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1.0 and Red Hat JBoss Portal 6.0.0, allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance, a similar issue to CVE-2013-2186.  NOTE: this issue is reportedly disputed by the Apache Tomcat team, although Red Hat considers it a vulnerability. The dispute appears to regard whether it is the responsibility of applications to avoid providing untrusted data to be deserialized, or whether this class should inherently protect against this issue","2014-01-19",0.07199,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":65,"severity":83,"isKev":17,"epssScore":84},"CVE-2012-5575","Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting, which allows remote attackers to force CXF to use weaker cryptographic algorithms than intended and makes it easier to decrypt communications, aka \"XML Encryption backwards compatibility attack.\"","2013-08-19",6.4,"Medium",0.06322,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":64,"cvssVersion":65,"severity":66,"isKev":17,"epssScore":89},"CVE-2011-4605","The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.2, and BRMS Platform before 5.3.0 do not properly restrict write access, which allows remote attackers to add, delete, or modify items in a JNDI tree via unspecified vectors.","2012-11-23",0.03521,{"cveId":91,"description":92,"publishedDate":88,"cvssScore":93,"cvssVersion":65,"severity":83,"isKev":17,"epssScore":94},"CVE-2011-4085","The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method.  NOTE: this vulnerability exists because of a CVE-2010-0738 regression.",6.8,0.0294,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":32,"cvssVersion":65,"severity":83,"isKev":17,"epssScore":99},"CVE-2011-1483","wsf\u002Fcommon\u002FDOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterprise BRMS Platform 5.1.0; and JBoss Enterprise Web Platform 5.1.1 does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity references, a similar issue to CVE-2003-1564.","2013-07-29",0.02664,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":93,"cvssVersion":65,"severity":83,"isKev":17,"epssScore":104},"CVE-2014-3518","jmx-remoting.sar in JBoss Remoting, as used in Red Hat JBoss Enterprise Application Platform (JEAP) 5.2.0, Red Hat JBoss BRMS 5.3.1, Red Hat JBoss Portal Platform 5.2.2, and Red Hat JBoss SOA Platform 5.3.1, does not properly implement the JSR 160 specification, which allows remote attackers to execute arbitrary code via unspecified vectors.","2014-07-22",0.02609,{"cveId":106,"description":107,"publishedDate":88,"cvssScore":32,"cvssVersion":65,"severity":83,"isKev":17,"epssScore":108},"CVE-2011-1096","The W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss Enterprise Portal Platform before 5.2.2 and other products, when using block ciphers in cipher-block chaining (CBC) mode, allows remote attackers to obtain plaintext data via a chosen-ciphertext attack on SOAP responses, aka \"character encoding pattern attack.\"",0.02587,{"cveId":110,"description":111,"publishedDate":112,"cvssScore":64,"cvssVersion":65,"severity":66,"isKev":17,"epssScore":113},"CVE-2013-0314","The GateIn Portal export\u002Fimport gadget in JBoss Enterprise Portal Platform 5.2.2 does not properly check authentication when importing Zip files, which allows remote attackers to modify site contents, remove the site, or alter the access controls for portlets.","2013-04-12",0.01635,[],{"title":116,"metaDescription":117,"keywords":118,"structuredData":119},"Jboss Enterprise Portal Platform by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Jboss Enterprise Portal Platform by Redhat covering 12 versions with 22 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Jboss Enterprise Portal Platform vulnerabilities, Jboss Enterprise Portal Platform security, Jboss Enterprise Portal Platform CVE, Redhat Jboss Enterprise Portal Platform, Jboss Enterprise Portal Platform threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":120,"@type":121,"name":122,"description":117,"url":123,"manufacturer":124,"applicationCategory":128,"softwareVersion":129,"mainEntity":130},"https:\u002F\u002Fschema.org","SoftwareApplication","Jboss Enterprise Portal Platform","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fjboss_enterprise_portal_platform",{"@type":125,"name":126,"url":127},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","12 versions tracked",{"@type":131,"name":132,"description":133,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Jboss Enterprise Portal Platform Security Vulnerabilities","Security vulnerabilities affecting Jboss Enterprise Portal Platform by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":135,"apiVersion":136},"2026-10-17T14:58:39.483Z","3.0",{"rows":138,"total":11,"capped":17,"failed":11},[],[]]