[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxDrlOyrfoaEz15EbB1V4y906OnSDdcOhK89rdIY95f4":3,"g5a-ex:redhat\u002Fjboss_operations_network@*":207,"g5a-family:redhat\u002Fjboss_operations_network":209},{"success":4,"data":5},true,{"product":6,"versions":89,"topVulnerabilitiesByEpss":123,"kevVulnerabilities":185,"seoMetadata":186,"meta":205},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":88},"redhat","jboss_operations_network",33,24,0,"2021-12-14",[14,18,21,23,25,28,30,32,34,36,38,40,43,45,48,50,53,55,57,59,61,63,65,68,70,72,74,76,78,80,82,84,86],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.0.0",2,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"2.0.0",6,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"2.0.1",{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},"2.1.0",{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},"2.1.2",1,{"version":29,"cve_count":20,"kev_count":11,"has_kev":17},"2.2",{"version":31,"cve_count":20,"kev_count":11,"has_kev":17},"2.3",{"version":33,"cve_count":20,"kev_count":11,"has_kev":17},"2.3.1",{"version":35,"cve_count":20,"kev_count":11,"has_kev":17},"2.4",{"version":37,"cve_count":27,"kev_count":11,"has_kev":17},"2.4.1",{"version":39,"cve_count":27,"kev_count":11,"has_kev":17},"2.4.2",{"version":41,"cve_count":42,"kev_count":11,"has_kev":17},"3.0",8,{"version":44,"cve_count":16,"kev_count":11,"has_kev":17},"3.0.1",{"version":46,"cve_count":47,"kev_count":11,"has_kev":17},"3.1",4,{"version":49,"cve_count":16,"kev_count":11,"has_kev":17},"3.1.1",{"version":51,"cve_count":52,"kev_count":11,"has_kev":17},"3.1.2",5,{"version":54,"cve_count":27,"kev_count":11,"has_kev":17},"3.1.4",{"version":56,"cve_count":27,"kev_count":11,"has_kev":17},"3.2.0",{"version":58,"cve_count":27,"kev_count":11,"has_kev":17},"3.2.1",{"version":60,"cve_count":27,"kev_count":11,"has_kev":17},"3.2.2",{"version":62,"cve_count":27,"kev_count":11,"has_kev":17},"3.2.3",{"version":64,"cve_count":11,"kev_count":11,"has_kev":17},"3.2.4",{"version":66,"cve_count":67,"kev_count":11,"has_kev":17},"3.3.1",3,{"version":69,"cve_count":11,"kev_count":11,"has_kev":17},"3.3.10",{"version":71,"cve_count":11,"kev_count":11,"has_kev":17},"3.3.11",{"version":73,"cve_count":27,"kev_count":11,"has_kev":17},"3.3.2",{"version":75,"cve_count":27,"kev_count":11,"has_kev":17},"3.3.3",{"version":77,"cve_count":27,"kev_count":11,"has_kev":17},"3.3.4",{"version":79,"cve_count":27,"kev_count":11,"has_kev":17},"3.3.5",{"version":81,"cve_count":27,"kev_count":11,"has_kev":17},"3.3.6",{"version":83,"cve_count":11,"kev_count":11,"has_kev":17},"3.3.7",{"version":85,"cve_count":11,"kev_count":11,"has_kev":17},"3.3.8",{"version":87,"cve_count":11,"kev_count":11,"has_kev":17},"3.3.9","Jboss Operations Network by Redhat is a technology product with 33 tracked versions and 24 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},{"version":29,"cve_count":20,"kev_count":11,"has_kev":17},{"version":31,"cve_count":20,"kev_count":11,"has_kev":17},{"version":33,"cve_count":20,"kev_count":11,"has_kev":17},{"version":35,"cve_count":20,"kev_count":11,"has_kev":17},{"version":37,"cve_count":27,"kev_count":11,"has_kev":17},{"version":39,"cve_count":27,"kev_count":11,"has_kev":17},{"version":41,"cve_count":42,"kev_count":11,"has_kev":17},{"version":44,"cve_count":16,"kev_count":11,"has_kev":17},{"version":46,"cve_count":47,"kev_count":11,"has_kev":17},{"version":49,"cve_count":16,"kev_count":11,"has_kev":17},{"version":51,"cve_count":52,"kev_count":11,"has_kev":17},{"version":54,"cve_count":27,"kev_count":11,"has_kev":17},{"version":56,"cve_count":27,"kev_count":11,"has_kev":17},{"version":58,"cve_count":27,"kev_count":11,"has_kev":17},{"version":60,"cve_count":27,"kev_count":11,"has_kev":17},{"version":62,"cve_count":27,"kev_count":11,"has_kev":17},{"version":64,"cve_count":11,"kev_count":11,"has_kev":17},{"version":66,"cve_count":67,"kev_count":11,"has_kev":17},{"version":69,"cve_count":11,"kev_count":11,"has_kev":17},{"version":71,"cve_count":11,"kev_count":11,"has_kev":17},{"version":73,"cve_count":27,"kev_count":11,"has_kev":17},{"version":75,"cve_count":27,"kev_count":11,"has_kev":17},{"version":77,"cve_count":27,"kev_count":11,"has_kev":17},{"version":79,"cve_count":27,"kev_count":11,"has_kev":17},{"version":81,"cve_count":27,"kev_count":11,"has_kev":17},{"version":83,"cve_count":11,"kev_count":11,"has_kev":17},{"version":85,"cve_count":11,"kev_count":11,"has_kev":17},{"version":87,"cve_count":11,"kev_count":11,"has_kev":17},[124,132,139,145,150,155,162,168,174,179],{"cveId":125,"description":126,"publishedDate":127,"cvssScore":128,"cvssVersion":129,"severity":130,"isKev":17,"epssScore":131},"CVE-2015-7501","Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift\u002FxPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.","2017-11-09",9.8,"v3.0","Critical",0.85562,{"cveId":133,"description":134,"publishedDate":12,"cvssScore":135,"cvssVersion":136,"severity":137,"isKev":17,"epssScore":138},"CVE-2021-4104","JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228. Note this issue only affects Log4j 1.2 when specifically configured to use JMSAppender, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.",7.5,"v3.1","High",0.80599,{"cveId":140,"description":141,"publishedDate":142,"cvssScore":135,"cvssVersion":143,"severity":137,"isKev":17,"epssScore":144},"CVE-2013-2165","ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBoss SOA Platform through 4.3.0 CP05 and 5.x through 5.3.1, Red Hat JBoss Portal through 4.3 CP07 and 5.x through 5.2.2, and Red Hat JBoss Operations Network through 2.4.2 and 3.x through 3.1.2 does not restrict the classes for which deserialization methods can be called, which allows remote attackers to execute arbitrary code via crafted serialized data.","2013-07-23","v2",0.12662,{"cveId":146,"description":147,"publishedDate":148,"cvssScore":128,"cvssVersion":129,"severity":130,"isKev":17,"epssScore":149},"CVE-2016-6330","The server in Red Hat JBoss Operations Network (JON), when SSL authentication is not configured for JON server \u002F agent communication, allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-3737.","2016-09-27",0.10625,{"cveId":151,"description":152,"publishedDate":153,"cvssScore":128,"cvssVersion":129,"severity":130,"isKev":17,"epssScore":154},"CVE-2016-3737","The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization.","2016-08-02",0.06794,{"cveId":156,"description":157,"publishedDate":158,"cvssScore":159,"cvssVersion":136,"severity":160,"isKev":17,"epssScore":161},"CVE-2020-14340","A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It may allow the attacker to cause a denial of service. It affects XNIO versions 3.6.0.Beta1 through 3.8.1.Final.","2021-06-02",5.9,"Medium",0.02212,{"cveId":163,"description":164,"publishedDate":165,"cvssScore":166,"cvssVersion":143,"severity":130,"isKev":17,"epssScore":167},"CVE-2015-0297","Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the (1) ServerInvokerServlet or (2) SchedulerService or (3) cause a denial of service (disk consumption) via the ContentManager.","2015-04-24",9,0.0218,{"cveId":169,"description":170,"publishedDate":171,"cvssScore":172,"cvssVersion":129,"severity":137,"isKev":17,"epssScore":173},"CVE-2016-5422","The web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote authenticated users to gain admin privileges via a crafted POST request.","2016-09-07",8.8,0.02139,{"cveId":175,"description":176,"publishedDate":177,"cvssScore":47,"cvssVersion":143,"severity":160,"isKev":17,"epssScore":178},"CVE-2014-7853","The JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application Platform (EAP) before 6.3.3 does not properly assign socket-binding-ref sensitivity classification to the security-domain attribute, which allows remote authenticated users to obtain sensitive information by leveraging access to the security-domain attribute.","2015-02-13",0.0124,{"cveId":180,"description":181,"publishedDate":182,"cvssScore":183,"cvssVersion":143,"severity":160,"isKev":17,"epssScore":184},"CVE-2012-1100","Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in a login request.","2014-02-14",5.8,0.01238,[],{"title":187,"metaDescription":188,"keywords":189,"structuredData":190},"Jboss Operations Network by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Jboss Operations Network by Redhat covering 33 versions with 24 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Jboss Operations Network vulnerabilities, Jboss Operations Network security, Jboss Operations Network CVE, Redhat Jboss Operations Network, Jboss Operations Network threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":191,"@type":192,"name":193,"description":188,"url":194,"manufacturer":195,"applicationCategory":199,"softwareVersion":200,"mainEntity":201},"https:\u002F\u002Fschema.org","SoftwareApplication","Jboss Operations Network","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fjboss_operations_network",{"@type":196,"name":197,"url":198},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","33 versions tracked",{"@type":202,"name":203,"description":204,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Jboss Operations Network Security Vulnerabilities","Security vulnerabilities affecting Jboss Operations Network by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":206,"apiVersion":41},"2026-10-17T14:58:22.262Z",{"rows":208,"total":11,"capped":17,"failed":11},[],[]]