Skip to content
OpenAdvisories
Unscored RHSA-2008:0158 5 CVEs

Red Hat Security Advisory: JBoss Enterprise Application Platform security update

Published Sep 15, 2024 · Updated Jan 14, 2026

Ecosystem: Red Hat

Fixed packages 29

ReleasePackageFixed in
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 concurrent 0:1.3.4-7jpp.ep1.6.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 glassfish-jaf 0:1.1.0-0jpp.ep1.10.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 glassfish-javamail 0:1.4.0-0jpp.ep1.8
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 glassfish-jsf 0:1.2_04-1.p02.0jpp.ep1.18
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 glassfish-jstl 0:1.2.0-0jpp.ep1.2
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 hibernate3 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 hibernate3-annotations 0:3.2.1-1.patch02.1jpp.ep1.2.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 hibernate3-annotations-javadoc 0:3.2.1-1.patch02.1jpp.ep1.2.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 hibernate3-entitymanager 0:3.2.1-1jpp.ep1.6.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 hibernate3-entitymanager-javadoc 0:3.2.1-1jpp.ep1.6.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 hibernate3-javadoc 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 hsqldb 1:1.8.0.8-2.patch01.1jpp.ep1.1
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 jacorb 0:2.3.0-1jpp.ep1.4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 jboss-aop 0:1.5.5-1.CP01.0jpp.ep1.1.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 jboss-cache 0:1.4.1-4.SP8_CP01.1jpp.ep1.1.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 jboss-common 0:1.2.1-0jpp.ep1.2
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 jboss-remoting 0:2.2.2-3.SP4.0jpp.ep1.1
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 jboss-seam 0:1.2.1-1.ep1.3.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 jboss-seam-docs 0:1.2.1-1.ep1.3.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 jbossas 0:4.2.0-3.GA_CP02.ep1.3.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 jbossweb 0:2.0.0-3.CP05.0jpp.ep1.1
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 jbossws-wsconsume-impl 0:2.0.0-0jpp.ep1.3
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 jbossxb 0:1.0.0-2.SP1.0jpp.ep1.2.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 jcommon 0:1.0.12-1jpp.ep1.2.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 jfreechart 0:1.0.9-1jpp.ep1.2.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 jgroups 1:2.4.1-1.SP4.0jpp.ep1.2
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 rh-eap-docs 0:4.2.0-3.GA_CP02.ep1.1.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 rh-eap-docs-examples 0:4.2.0-3.GA_CP02.ep1.1.el4
Red Hat · Rhel Application Stack 1 rhel_application_stack:1 wsdl4j 0:1.6.2-1jpp.ep1.8

Vulnerabilities 5

  • Unscored —
    CVE-2007-4575 EPSS 14%

    HSQLDB before 1.8.0.9, as used in OpenOffice.org (OOo) 2 before 2.3.1, allows user-assisted remote attackers to execute…

    hsqldb Debian
  • Low —
    CVE-2007-5461 Public exploit EPSS 40%

    Apache Tomcat Path Traversal Vulnerability

    Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that s…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-6306

    Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers…

    libjfreechart-java Debian
  • Unscored —
    CVE-2007-6433

    The getRenderedEjbql method in the org.jboss.seam.framework.Query class in JBoss Seam 2.x before 2.0.0.CR3 allows remot…

  • Medium —
    CVE-2008-0002

    Apache Tomcat Sensitive Information Disclosure

    Apache Tomcat 6.0.0 through 6.0.15 processes parameters in the context of the wrong request when an exception occurs during parameter processing, which might allow remote attackers to obtain sensitive information, as demonstrated by disconnecting during this …

    org.apache.tomcat:tomcat Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    http://www.redhat.com/docs/manuals/jboss/jboss-eap-4.2.0.cp02/readme.html
  • article
    https://rhstack.108.redhat.com/docs/Red_Hat_Application_Stack_V.1.2_Release_Notes.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=299801
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=421081
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=426206
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0158.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-4575
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-4575
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-4575
  • report
    https://access.redhat.com/security/cve/CVE-2007-5461
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=333791
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5461
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5461
  • report
    https://access.redhat.com/security/cve/CVE-2007-6306
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-6306
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-6306
  • report
    https://access.redhat.com/security/cve/CVE-2007-6433
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-6433
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-6433
  • report
    https://access.redhat.com/security/cve/CVE-2008-0002
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=432327
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0002
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0002