What’s Vulnerable › Products

Red Hat JBoss Enterprise Web Server vulnerabilities

35 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Red Hat JBoss Enterprise Web Server version is affected

Exploited Red Hat JBoss Enterprise Web Server vulnerabilities

• CVE-2016-8735 — Apache Tomcat Remote Code Execution Vulnerability
• CVE-2017-12617 — Apache Tomcat Remote Code Execution Vulnerability
• CVE-2017-12615 — Apache Tomcat on Windows Remote Code Execution Vulnerability

Latest Red Hat JBoss Enterprise Web Server vulnerabilities

• CVE-2020-25710 — (CVSS 7.5)
• CVE-2012-5626 — (CVSS 7.5)
• CVE-2019-19906 — (CVSS 7.5)
• CVE-2014-3701 — (CVSS 8.1)
• CVE-2014-3699 — (CVSS 9.8)
• CVE-2012-2148 — (CVSS 3.3)
• CVE-2014-3700 — (CVSS 9.8)
• CVE-2014-3655 — (CVSS 4.3)
• CVE-2011-3923 — (CVSS 9.8)
• CVE-2019-1559 — 0-byte record padding oracle (CVSS 5.9)
• CVE-2018-1336 — (CVSS 7.5)
• CVE-2018-1304 — (CVSS 5.9)
• CVE-2015-7501 — Deserialization of Untrusted Data in Apache commons collections (CVSS 9.8)
• CVE-2017-12613 — (CVSS 7.1)
• CVE-2017-12617 — Apache Tomcat Remote Code Execution Vulnerability (CVSS 8.1) — exploited
• CVE-2015-5184 — (CVSS 7.5)
• CVE-2015-5183 — (CVSS 7.5)
• CVE-2017-12615 — Apache Tomcat on Windows Remote Code Execution Vulnerability (CVSS 8.1) — exploited
• CVE-2016-6796 — (CVSS 7.5)
• CVE-2016-6797 — (CVSS 7.5)
• CVE-2016-6794 — (CVSS 5.3)
• CVE-2016-5018 — (CVSS 9.1)
• CVE-2016-0762 — (CVSS 5.9)
• CVE-2017-9788 — (CVSS 9.1)
• CVE-2016-8735 — Apache Tomcat Remote Code Execution Vulnerability (CVSS 9.8) — exploited