https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:35:45.291101+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2012-avi-065 certa-2012-avi-065 — De multiples vulnérabilités ont été corrigées dans <span class="textit">JBoss Operations Network</span>. 2026-10-03T07:35:45.294830+00:00 certa-2012-avi-065 https://cve.radiocsirt.org/vuln/euvd-2026-116857 EUVD-2026-116857 2026-10-03T07:35:45.294866+00:00 EUVD-2026-116857 https://cve.radiocsirt.org/vuln/fkie_cve-2011-4573 fkie_cve-2011-4573 2026-10-03T07:35:45.294882+00:00

Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update from the group connection properties history, which prevents such activities from being recorded in the audit trail.

 https://cve.radiocsirt.org/vuln/ghsa-5298-jrhg-c6hc GHSA-5298-jrhg-c6hc 2026-10-03T07:35:45.294909+00:00

Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update from the group connection properties history, which prevents such activities from being recorded in the audit trail.

 https://cve.radiocsirt.org/vuln/gsd-2011-4573 gsd-2011-4573 2026-10-03T07:35:45.294926+00:00 gsd-2011-4573 https://cve.radiocsirt.org/vuln/rhsa-2012:0089 RHSA-2012:0089 — Red Hat Security Advisory: JBoss Operations Network 2.4.2 update 2026-10-03T07:35:45.294938+00:00

JON: Multiple XSS flaws JON: Incorrect delete permissions check tomcat: hash table collisions CPU usage DoS (oCERT-2011-003) JON: Unapproved agents can connect using the name of an existing approved agent JON: Unapproved agents can hijack an approved agent's endpoint by using a null security token