https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:08:29.386289+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2011-avi-703 certa-2011-avi-703 — Plusieurs vulnérabilités affectent JBoss. Elles permettent de contourner la politique de sécurité du serveur ou de réal… 2026-10-03T00:08:29.397974+00:00 certa-2011-avi-703 https://cve.radiocsirt.org/vuln/euvd-2026-116660 EUVD-2026-116660 2026-10-03T00:08:29.398016+00:00 EUVD-2026-116660 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4085 fkie_cve-2011-4085 2026-10-03T00:08:29.398031+00:00

The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.

 https://cve.radiocsirt.org/vuln/ghsa-24wp-35x7-5hx9 GHSA-24wp-35x7-5hx9 2026-10-03T00:08:29.398059+00:00

The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0, BRMS Platform before 5.3.0, and Portal Platform before 4.3 CP07 perform access control only for the GET and POST methods, which allow remote attackers to bypass authentication by sending a request with a different method. NOTE: this vulnerability exists because of a CVE-2010-0738 regression.

 https://cve.radiocsirt.org/vuln/gsd-2011-4085 gsd-2011-4085 2026-10-03T00:08:29.398076+00:00 gsd-2011-4085 https://cve.radiocsirt.org/vuln/rhsa-2011:1456 RHSA-2011:1456 — Red Hat Security Advisory: JBoss Enterprise SOA Platform 5.2.0 update 2026-10-03T00:08:29.398087+00:00

jruby: XSS in the regular expression engine when processing invalid UTF-8 byte sequences Invoker servlets authentication bypass (HTTP verb tampering)