Max CVSS 7.8 Min CVSS 3.3 Total Count2
IDCVSSSummaryLast (major) updatePublished
CVE-2012-2377 3.3
JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups channel, which allows remote attackers in adjacent
29-08-2017 - 01:31 23-11-2012 - 20:55
CVE-2012-0818 5.0
RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.
29-08-2017 - 01:31 23-11-2012 - 20:55
CVE-2012-0079 4.3
Unspecified vulnerability in Oracle OpenSSO 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Administration.
29-08-2017 - 01:30 18-01-2012 - 22:55
CVE-2011-5245 5.0
The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, aka an XML external entity (XXE
29-08-2017 - 01:30 23-11-2012 - 20:55
CVE-2011-4838 7.8
JRuby before 1.6.5.1 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintai
29-08-2017 - 01:30 30-12-2011 - 01:55
CVE-2011-3517 7.8
Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 8.0 allows remote attackers to affect availability via unknown vectors related to Authentication.
29-08-2017 - 01:30 18-10-2011 - 22:55
CVE-2011-4605 7.5
The (1) JNDI service, (2) HA-JNDI service, and (3) HAJNDIFactory invoker servlet in JBoss Enterprise Application Platform 4.3.0 CP10 and 5.1.2, Web Platform 5.1.2, SOA Platform 4.2.0.CP05 and 4.3.0.CP05, Portal Platform 4.3 CP07 and 5.2.x before 5.2.
02-04-2013 - 03:13 23-11-2012 - 20:55
CVE-2011-3506 4.3
Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 7.1 and 8.0 allows remote attackers to affect integrity via unknown vectors related to Authentication.
27-11-2012 - 04:34 18-10-2011 - 22:55
Back to Top Mark selected
Back to Top