Skip to content
OpenAdvisories
Medium 2 exploited CVEs RHSA-2010:0378 3 CVEs

Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0.CP09 update

Published Sep 15, 2024 · Updated Jan 14, 2026

Ecosystem: Red Hat

Fixed packages 17

ReleasePackageFixed in
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 hibernate3 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 hibernate3-annotations 0:3.3.1-1.12.GA_CP03.ep1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 hibernate3-annotations-javadoc 0:3.3.1-1.12.GA_CP03.ep1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 hibernate3-javadoc 1:3.2.4-1.SP1_CP10.0jpp.ep1.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jacorb 0:2.3.0-1jpp.ep1.10.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jboss-aop 0:1.5.5-3.CP05.2.ep1.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jboss-cache 0:1.4.1-6.SP14.1.ep1.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jboss-remoting 0:2.2.3-3.SP2.ep1.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jboss-seam 0:1.2.1-1.ep1.24.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jboss-seam-docs 0:1.2.1-1.ep1.24.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jbossas 0:4.2.0-6.GA_CP09.6.ep1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jbossas-4.2.0.GA_CP09-bin 0:4.2.0-6.GA_CP09.6.ep1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jbossas-client 0:4.2.0-6.GA_CP09.6.ep1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jbossts 1:4.2.3-1.SP5_CP09.1jpp.ep1.1.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 jbossweb 0:2.0.0-6.CP13.0jpp.ep1.1.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 rh-eap-docs 0:4.2.0-7.GA_CP09.ep1.4.1.el5
Red Hat · JBoss EAP 4 jboss_enterprise_application_platform:4.2.0::el5 rh-eap-docs-examples 0:4.2.0-7.GA_CP09.ep1.4.1.el5

Vulnerabilities 3

  • Medium 5.9
    CVE-2010-1428 Exploited · Ransomware Public exploit Scanner template EPSS 53%

    The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) …

    KEV May 25, 2022
  • Low 3.7
    CVE-2010-0738 Exploited · Ransomware Public exploit Scanner template EPSS 74%

    The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.…

    KEV May 25, 2022
  • Unscored —
    CVE-2010-1429 Public exploit Scanner template EPSS 54%

    Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 …

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    http://www.redhat.com/docs/en-US/JBoss_Enterprise_Application_Platform/4.2.0.cp09/html-single/Release_Notes/index.html
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=571835
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=574105
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=585899
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=585900
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0378.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-0738
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-0738
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-0738
  • article
    https://access.redhat.com/kb/docs/DOC-30741
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • report
    https://access.redhat.com/security/cve/CVE-2010-1428
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1428
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1428
  • report
    https://access.redhat.com/security/cve/CVE-2010-1429
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-1429
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-1429