CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-8627

admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download server log files that allows logs to be available via GET requests making them vulnerable to cross-origin attacks. An attacker could trigger the user's browser to request the log files consuming enough resources that normal server functioning could be impaired.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.008

EPSS Ranking 73.2%

CVSS Severity

CVSS v3 Score 4.3

CVSS v2 Score 4.3

References

Products affected by CVE-2016-8627

Redhat » Jboss Enterprise Application Platform » Version: 6.4.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.4.0
Redhat » Jboss Enterprise Application Platform » Version: 7.0.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0
Redhat » Jboss Enterprise Application Platform » Version: 7.1.0

cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0
Redhat » Keycloak » Version: N/A

cpe:2.3:a:redhat:keycloak:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-8627

Products

Pricing

Contact Us