Skip to content
OpenAdvisories
Unscored 1 exploited CVE RHSA-2011:1799 2 CVEs

Red Hat Security Advisory: JBoss Enterprise Application Platform 5.1.2 update

Published Sep 29, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 93

ReleasePackageFixed in
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 apache-cxf 0:2.2.12-4.patch_02.1.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 cglib 0:2.2-5.3.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 facelets 0:1.1.15-3.B1_patch_01.2.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 glassfish-jaxb 0:2.1.12-10_patch_02.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 glassfish-jsf 0:1.2_13-5_patch_01.3.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jacorb-jboss 0:2.3.1-10.patch_03.4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jakarta-commons-logging-jboss 0:1.1-10.3_patch_02.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-aop2 0:2.1.6-2.CP03.1.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-cache-core 0:3.2.8-1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-cl 0:2.0.10-1.2.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-cluster-ha-client 0:1.1.4-1.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-common-core 0:2.2.18-1.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-eap5-native 0:5.1.2-1.4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-ejb3-core 0:1.3.8-0.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-ejb3-proxy-clustered 0:1.0.3-2.SP1.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-ejb3-proxy-impl 0:1.0.6-2.SP2.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-el 0:1.0_02-0.CR6.2.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-messaging 0:1.4.8-9.SP5.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-naming 0:5.0.3-3.CP01.3.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-remoting 0:2.5.4-9.SP3.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-seam2 0:2.2.5.EAP5-5.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-seam2-docs 0:2.2.5.EAP5-5.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-seam2-examples 0:2.2.5.EAP5-5.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-seam2-runtime 0:2.2.5.EAP5-5.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jboss-security-spi 1:2.0.4-6.SP8.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossas 0:5.1.2-8.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossas-client 0:5.1.2-8.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossas-messaging 0:5.1.2-8.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossas-tp-licenses 0:5.1.2-7.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossas-ws-cxf 0:5.1.2-8.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossas-ws-native 0:5.1.2-8.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbosssx2 0:2.0.4-6.SP8.2.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossts 1:4.6.1-11.CP12.4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossts-javadoc 1:4.6.1-11.CP12.4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossweb 0:2.1.12-1.4_patch_01.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossweb-el-1.0-api 0:2.1.12-1.4_patch_01.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossweb-jsp-2.1-api 0:2.1.12-1.4_patch_01.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossweb-lib 0:2.1.12-1.4_patch_01.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossweb-servlet-2.5-api 0:2.1.12-1.4_patch_01.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossws 0:3.1.2-7.SP11.4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossws-common 0:1.1.0-6.SP8_patch_01.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossws-framework 0:3.1.2-6.SP10.2.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jbossws-spi 0:1.1.2-5.SP7.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jgroups 1:2.6.20-1.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jopr-embedded 0:1.3.4-18.SP5.8.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jopr-hibernate-plugin 0:3.0.0-13.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jopr-jboss-as-5-plugin 0:3.0.0-12.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 jopr-jboss-cache-v3-plugin 0:3.0.0-14.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 mod_cluster 0:1.0.10-3.1.GA_CP02.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 mod_cluster-demo 0:1.0.10-3.1.GA_CP02.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 mod_cluster-jbossas 0:1.0.10-3.1.GA_CP02.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 mod_cluster-jbossweb2 0:1.0.10-3.1.GA_CP02.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 mod_cluster-native 0:1.0.10-3.1.GA_CP02.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 mod_cluster-tomcat6 0:1.0.10-3.1.GA_CP02.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 org-mc4j-ems 0:1.2.15.1-4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 picketlink-federation 0:2.0.2-1.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 picketlink-federation-webapp-idp 0:2.0.2-1.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 picketlink-federation-webapp-pdp 0:2.0.2-1.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 picketlink-federation-webapp-sts 0:2.0.2-1.1.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 resteasy 0:1.2.1-9.CP02.4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 resteasy-examples 0:1.2.1-9.CP02.4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 resteasy-javadoc 0:1.2.1-9.CP02.4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 resteasy-manual 0:1.2.1-9.CP02.4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rh-eap-docs 0:5.1.2-6.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rh-eap-docs-examples 0:5.1.2-6.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-ant-bundle-common 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-common-parent 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-core-client-api 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-core-comm-api 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-core-dbutils 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-core-domain 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-core-gui 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-core-native-system 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-core-parent 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-core-plugin-api 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-core-plugin-container 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-core-plugindoc 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-core-util 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-filetemplate-bundle-common 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-helpers 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-jboss-as-common 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-jmx-plugin 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-modules-parent 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-parent 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-platform-plugin 0:3.0.0-13.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-plugin-validator 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-pluginAnnotations 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-pluginGen 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-plugins-parent 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 rhq-rtfilter 0:3.0.0-20.EmbJopr4.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 slf4j 0:1.5.8-10_patch_01.2.ep5.el5
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el5 xalan-j2 0:2.7.1-6_patch_05.1.ep5.el5

Vulnerabilities 2

  • Unscored —
    CVE-2011-4085 Exploited

    The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0…

  • Medium —
    CVE-2011-4314

    OpenID4Java does not verify that Attribute Exchange (AX) information is signed

    message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, …

    org.openid4java:openid4java openid4java Debian Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://docs.redhat.com/docs/en-US/index.html
  • article
    https://access.redhat.com/support/offerings/techpreview/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=733731
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=750422
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=754386
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1799.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-4085
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-4085
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-4085
  • report
    https://access.redhat.com/security/cve/CVE-2011-4314
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-4314
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-4314