[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foTJDawDT7LsJ1MfNF58w2gkjOwxiJIZxkxK71f-8-dQ":3,"g5a-ex:redhat\u002Fjboss_enterprise_soa_platform@*":136,"g5a-family:redhat\u002Fjboss_enterprise_soa_platform":138},{"success":4,"data":5},true,{"product":6,"versions":43,"topVulnerabilitiesByEpss":54,"kevVulnerabilities":113,"seoMetadata":114,"meta":133},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":42},"redhat","jboss_enterprise_soa_platform",10,17,0,"2020-03-11",[14,18,21,24,27,30,32,35,38,40],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"4.2.0",9,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"4.3.0",12,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"5.0.0",7,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"5.0.1",5,{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},"5.0.2",4,{"version":31,"cve_count":23,"kev_count":11,"has_kev":17},"5.1.0",{"version":33,"cve_count":34,"kev_count":11,"has_kev":17},"5.1.1",3,{"version":36,"cve_count":37,"kev_count":11,"has_kev":17},"5.2.0",1,{"version":39,"cve_count":34,"kev_count":11,"has_kev":17},"5.3.0",{"version":41,"cve_count":34,"kev_count":11,"has_kev":17},"5.3.1","Jboss Enterprise Soa Platform by Redhat is a technology product with 10 tracked versions and 17 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[44,45,46,47,48,49,50,51,52,53],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},{"version":31,"cve_count":23,"kev_count":11,"has_kev":17},{"version":33,"cve_count":34,"kev_count":11,"has_kev":17},{"version":36,"cve_count":37,"kev_count":11,"has_kev":17},{"version":39,"cve_count":34,"kev_count":11,"has_kev":17},{"version":41,"cve_count":34,"kev_count":11,"has_kev":17},[55,63,71,78,83,88,93,98,103,108],{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":17,"epssScore":62},"CVE-2015-7501","Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift\u002FxPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.","2017-11-09",9.8,"v3.0","Critical",0.85562,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":68,"severity":69,"isKev":17,"epssScore":70},"CVE-2013-2165","ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBoss SOA Platform through 4.3.0 CP05 and 5.x through 5.3.1, Red Hat JBoss Portal through 4.3 CP07 and 5.x through 5.2.2, and Red Hat JBoss Operations Network through 2.4.2 and 3.x through 3.1.2 does not restrict the classes for which deserialization methods can be called, which allows remote attackers to execute arbitrary code via crafted serialized data.","2013-07-23",7.5,"v2","High",0.12662,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":68,"severity":76,"isKev":17,"epssScore":77},"CVE-2012-5575","Apache CXF 2.5.x before 2.5.10, 2.6.x before CXF 2.6.7, and 2.7.x before CXF 2.7.4 does not verify that a specified cryptographic algorithm is allowed by the WS-SecurityPolicy AlgorithmSuite definition before decrypting, which allows remote attackers to force CXF to use weaker cryptographic algorithms than intended and makes it easier to decrypt communications, aka \"XML Encryption backwards compatibility attack.\"","2013-08-19",6.4,"Medium",0.06322,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":67,"cvssVersion":68,"severity":69,"isKev":17,"epssScore":82},"CVE-2011-4605","The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.2, and BRMS Platform before 5.3.0 do not properly restrict write access, which allows remote attackers to add, delete, or modify items in a JNDI tree via unspecified vectors.","2012-11-23",0.03521,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":67,"cvssVersion":68,"severity":69,"isKev":17,"epssScore":87},"CVE-2010-3708","The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted static initializer.","2010-12-30",0.03017,{"cveId":89,"description":90,"publishedDate":81,"cvssScore":91,"cvssVersion":68,"severity":76,"isKev":17,"epssScore":92},"CVE-2011-4085","The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method.  NOTE: this vulnerability exists because of a CVE-2010-0738 regression.",6.8,0.0294,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":26,"cvssVersion":68,"severity":76,"isKev":17,"epssScore":97},"CVE-2013-4210","The org.jboss.remoting.transport.socket.ServerThread class in Red Hat JBoss Remoting for Red Hat JBoss SOA Platform 5.3.1 GA, Web Platform 5.2.0, Enterprise Application Platform 5.2.0, and other products allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors.","2013-10-01",0.02672,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":26,"cvssVersion":68,"severity":76,"isKev":17,"epssScore":102},"CVE-2011-1483","wsf\u002Fcommon\u002FDOMUtils.java in JBossWS Native in Red Hat JBoss Enterprise Application Platform 4.2.0.CP09, 4.3, and 5.1.1; JBoss Enterprise Portal Platform 4.3.CP06 and 5.1.1; JBoss Enterprise SOA Platform 4.2.CP05, 4.3.CP05, and 5.1.0; JBoss Communications Platform 1.2.11 and 5.1.1; JBoss Enterprise BRMS Platform 5.1.0; and JBoss Enterprise Web Platform 5.1.1 does not properly handle recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted request containing an XML document with a DOCTYPE declaration and a large number of nested entity references, a similar issue to CVE-2003-1564.","2013-07-29",0.02664,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":91,"cvssVersion":68,"severity":76,"isKev":17,"epssScore":107},"CVE-2014-3518","jmx-remoting.sar in JBoss Remoting, as used in Red Hat JBoss Enterprise Application Platform (JEAP) 5.2.0, Red Hat JBoss BRMS 5.3.1, Red Hat JBoss Portal Platform 5.2.2, and Red Hat JBoss SOA Platform 5.3.1, does not properly implement the JSR 160 specification, which allows remote attackers to execute arbitrary code via unspecified vectors.","2014-07-22",0.02609,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":91,"cvssVersion":68,"severity":76,"isKev":17,"epssScore":112},"CVE-2011-2196","jboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss Enterprise SOA Platform 4.3.0.CP05 and 5.1.0; JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3.0, 4.3.0.CP09, and 5.1.1; and JBoss Enterprise Web Platform 5.1.1, does not properly restrict use of Expression Language (EL) statements in FacesMessages during page exception handling, which allows remote attackers to execute arbitrary Java code via a crafted URL to an application.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1484.","2011-07-27",0.02593,[],{"title":115,"metaDescription":116,"keywords":117,"structuredData":118},"Jboss Enterprise Soa Platform by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Jboss Enterprise Soa Platform by Redhat covering 10 versions with 17 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Jboss Enterprise Soa Platform vulnerabilities, Jboss Enterprise Soa Platform security, Jboss Enterprise Soa Platform CVE, Redhat Jboss Enterprise Soa Platform, Jboss Enterprise Soa Platform threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":119,"@type":120,"name":121,"description":116,"url":122,"manufacturer":123,"applicationCategory":127,"softwareVersion":128,"mainEntity":129},"https:\u002F\u002Fschema.org","SoftwareApplication","Jboss Enterprise Soa Platform","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fjboss_enterprise_soa_platform",{"@type":124,"name":125,"url":126},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","10 versions tracked",{"@type":130,"name":131,"description":132,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Jboss Enterprise Soa Platform Security Vulnerabilities","Security vulnerabilities affecting Jboss Enterprise Soa Platform by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":134,"apiVersion":135},"2026-10-17T14:43:22.473Z","3.0",{"rows":137,"total":11,"capped":17,"failed":11},[],[]]