Redhat Jboss Community Application Server — known CVE vulnerabilities

Every CVE whose affected-product data names Redhat Jboss Community Application Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2012-4529 — CVSS 4.3 (medium): The org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and earlier, when the tracking mode is set to…
• CVE-2012-2148 — CVSS 3.3 (low): An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies
• CVE-2009-5066 — CVSS 2.1 (low): twiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments, which allows local users to read the…