Skip to content
OpenAdvisories
Medium 2 exploited CVEs RHSA-2010:0377 3 CVEs

Red Hat Security Advisory: JBoss Enterprise Application Platform 4.3.0.CP08 update

Published Sep 15, 2024 · Updated Jan 14, 2026

Ecosystem: Red Hat

Fixed packages 23

ReleasePackageFixed in
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 hibernate3 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 hibernate3-annotations 0:3.3.1-1.12.GA_CP03.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 hibernate3-annotations-javadoc 0:3.3.1-1.12.GA_CP03.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 hibernate3-javadoc 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 hsqldb 1:1.8.0.8-3.patch03.1jpp.ep1.3.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jacorb 0:2.3.0-1jpp.ep1.10.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jakarta-commons-httpclient 1:3.0.1-1.patch01.1jpp.ep1.4.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jboss-aop 0:1.5.5-3.CP05.2.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jboss-cache 0:1.4.1-6.SP14.1.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jboss-messaging 0:1.4.0-3.SP3_CP10.2.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jboss-remoting 0:2.2.3-3.SP2.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jboss-seam 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jboss-seam-docs 0:1.2.1-3.JBPAPP_4_3_0_GA.ep1.20.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jboss-seam2 0:2.0.2.FP-1.ep1.23.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jboss-seam2-docs 0:2.0.2.FP-1.ep1.23.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jbossas 0:4.3.0-7.GA_CP08.5.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jbossas-4.3.0.GA_CP08-bin 0:4.3.0-7.GA_CP08.5.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jbossas-client 0:4.3.0-7.GA_CP08.5.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jbossts 1:4.2.3-1.SP5_CP09.1jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jbossweb 0:2.0.0-6.CP13.0jpp.ep1.1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 jbossws 0:2.0.1-5.SP2_CP08.1.ep1.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 rh-eap-docs 0:4.3.0-7.GA_CP08.ep1.6.el4
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.3.0::el4 rh-eap-docs-examples 0:4.3.0-7.GA_CP08.ep1.6.el4

Vulnerabilities 3

  • Medium 5.9
    CVE-2010-1428 Exploited · Ransomware Public exploit Scanner template EPSS 53%

    The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) …

    KEV May 25, 2022
  • Low 3.7
    CVE-2010-0738 Exploited · Ransomware Public exploit Scanner template EPSS 74%

    The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.…

    KEV May 25, 2022
  • Unscored —
    CVE-2010-1429 Public exploit Scanner template EPSS 54%

    Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 …

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.3.0.cp08/html-single/Release_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=571828
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=574105
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=585899
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=585900
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0377.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-0738
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0738
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0738
  • article
    https://access.redhat.com/kb/docs/DOC-30741
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • report
    https://access.redhat.com/security/cve/CVE-2010-1428
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1428
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1428
  • report
    https://access.redhat.com/security/cve/CVE-2010-1429
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1429
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1429