CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-2908

Cross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss Enterprise Portal Platform before 5.2.2, BRMS Platform 5.3.0 before roll up patch1, and SOA Platform 5.3.0 allows remote authenticated users to hijack the authentication of arbitrary users for requests that perform operations on MBeans and possibly execute arbitrary code via unspecified vectors.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 73.7%

CVSS Severity

CVSS v2 Score 6.0

References

Products affected by CVE-2011-2908

Redhat » Jboss Enterprise Brms Platform » Version: 5.3.0

cpe:2.3:a:redhat:jboss_enterprise_brms_platform:5.3.0
Redhat » Jboss Enterprise Portal Platform » Version: 4.3.0

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:4.3.0
Redhat » Jboss Enterprise Portal Platform » Version: 5.0.0

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.0
Redhat » Jboss Enterprise Portal Platform » Version: 5.0.1

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.0.1
Redhat » Jboss Enterprise Portal Platform » Version: 5.1.0

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.0
Redhat » Jboss Enterprise Portal Platform » Version: 5.1.1

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.1.1
Redhat » Jboss Enterprise Portal Platform » Version: 5.2.0

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.0
Redhat » Jboss Enterprise Portal Platform » Version: 5.2.1

cpe:2.3:a:redhat:jboss_enterprise_portal_platform:5.2.1
Redhat » Jboss Enterprise Soa Platform » Version: 5.3.0

cpe:2.3:a:redhat:jboss_enterprise_soa_platform:5.3.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-2908

Products

Pricing

Contact Us