Skip to content
OpenAdvisories
Unscored 1 exploited CVE RHSA-2011:1798 2 CVEs

Red Hat Security Advisory: JBoss Enterprise Application Platform 5.1.2 update

Published Sep 29, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 93

ReleasePackageFixed in
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 apache-cxf 0:2.2.12-4.patch_02.1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 cglib 0:2.2-5.5.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 facelets 0:1.1.15-3.B1_patch_01.2.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 glassfish-jaxb 0:2.1.12-10_patch_02.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 glassfish-jsf 0:1.2_13-5_patch_01.3.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jacorb-jboss 0:2.3.1-10.patch_03.4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jakarta-commons-logging-jboss 0:1.1-10.3_patch_02.1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-aop2 0:2.1.6-2.CP03.1.1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-cache-core 0:3.2.8-1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-cl 0:2.0.10-1.2.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-cluster-ha-client 0:1.1.4-1.1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-common-core 0:2.2.18-1.1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-eap5-native 0:5.1.2-1.4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-ejb3-core 0:1.3.8-0.1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-ejb3-proxy-clustered 0:1.0.3-2.SP1.1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-ejb3-proxy-impl 0:1.0.6-2.SP2.1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-el 0:1.0_02-0.CR6.2.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-messaging 0:1.4.8-9.SP5.1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-naming 0:5.0.3-3.CP01.3.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-remoting 0:2.5.4-9.SP3.1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-seam2 0:2.2.5.EAP5-7.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-seam2-docs 0:2.2.5.EAP5-7.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-seam2-examples 0:2.2.5.EAP5-7.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-seam2-runtime 0:2.2.5.EAP5-7.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jboss-security-spi 1:2.0.4-6.SP8.1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossas 0:5.1.2-8.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossas-client 0:5.1.2-8.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossas-messaging 0:5.1.2-8.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossas-tp-licenses 0:5.1.2-7.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossas-ws-cxf 0:5.1.2-8.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossas-ws-native 0:5.1.2-8.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbosssx2 0:2.0.4-6.SP8.2.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossts 1:4.6.1-11.CP12.4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossts-javadoc 1:4.6.1-11.CP12.4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossweb 0:2.1.12-1.4_patch_01.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossweb-el-1.0-api 0:2.1.12-1.4_patch_01.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossweb-jsp-2.1-api 0:2.1.12-1.4_patch_01.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossweb-lib 0:2.1.12-1.4_patch_01.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossweb-servlet-2.5-api 0:2.1.12-1.4_patch_01.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossws 0:3.1.2-7.SP11.4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossws-common 0:1.1.0-6.SP8_patch_01.1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossws-framework 0:3.1.2-6.SP10.1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jbossws-spi 0:1.1.2-5.SP7.1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jgroups 1:2.6.20-1.1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jopr-embedded 0:1.3.4-18.SP5.8.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jopr-hibernate-plugin 0:3.0.0-13.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jopr-jboss-as-5-plugin 0:3.0.0-12.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 jopr-jboss-cache-v3-plugin 0:3.0.0-14.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 mod_cluster 0:1.0.10-3.2.GA_CP02.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 mod_cluster-demo 0:1.0.10-3.2.GA_CP02.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 mod_cluster-jbossas 0:1.0.10-3.2.GA_CP02.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 mod_cluster-jbossweb2 0:1.0.10-3.2.GA_CP02.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 mod_cluster-native 0:1.0.10-3.1.1.GA_CP02.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 mod_cluster-tomcat6 0:1.0.10-3.2.GA_CP02.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 org-mc4j-ems 0:1.2.15.1-7.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 picketlink-federation 0:2.0.2-1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 picketlink-federation-webapp-idp 0:2.0.2-1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 picketlink-federation-webapp-pdp 0:2.0.2-1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 picketlink-federation-webapp-sts 0:2.0.2-1.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 resteasy 0:1.2.1-9.CP02.5.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 resteasy-examples 0:1.2.1-9.CP02.5.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 resteasy-javadoc 0:1.2.1-9.CP02.5.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 resteasy-manual 0:1.2.1-9.CP02.5.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rh-eap-docs 0:5.1.2-6.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rh-eap-docs-examples 0:5.1.2-6.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-ant-bundle-common 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-common-parent 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-core-client-api 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-core-comm-api 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-core-dbutils 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-core-domain 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-core-gui 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-core-native-system 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-core-parent 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-core-plugin-api 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-core-plugin-container 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-core-plugindoc 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-core-util 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-filetemplate-bundle-common 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-helpers 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-jboss-as-common 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-jmx-plugin 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-modules-parent 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-parent 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-platform-plugin 0:3.0.0-13.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-plugin-validator 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-pluginAnnotations 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-pluginGen 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-plugins-parent 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 rhq-rtfilter 0:3.0.0-20.EmbJopr4.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 slf4j 0:1.5.8-10_patch_01.2.ep5.el6
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el6 xalan-j2 0:2.7.1-6_patch_05.1.ep5.el6

Vulnerabilities 2

  • Unscored —
    CVE-2011-4085 Exploited

    The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0…

  • Medium —
    CVE-2011-4314

    OpenID4Java does not verify that Attribute Exchange (AX) information is signed

    message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, …

    org.openid4java:openid4java openid4java Debian Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://docs.redhat.com/docs/en-US/index.html
  • article
    https://access.redhat.com/support/offerings/techpreview/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=733727
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=750422
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=754386
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1798.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-4085
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-4085
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-4085
  • report
    https://access.redhat.com/security/cve/CVE-2011-4314
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-4314
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-4314