Skip to content
OpenAdvisories
Unscored 1 exploited CVE RHSA-2011:1800 2 CVEs

Red Hat Security Advisory: JBoss Enterprise Application Platform 5.1.2 update

Published Sep 29, 2024 · Updated Aug 5, 2026

Ecosystem: Red Hat

Fixed packages 85

ReleasePackageFixed in
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 apache-cxf 0:2.2.12-4.patch_02.1.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 cglib 0:2.2-5.3.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 facelets 0:1.1.15-3.B1_patch_01.2.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 glassfish-jaxb 0:2.1.12-10_patch_02.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 glassfish-jsf 0:1.2_13-5_patch_01.3.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jacorb-jboss 0:2.3.1-10.patch_03.4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jakarta-commons-logging-jboss 0:1.1-10.3_patch_02.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-aop2 0:2.1.6-2.CP03.1.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-cache-core 0:3.2.8-1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-cl 0:2.0.10-1.2.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-cluster-ha-client 0:1.1.4-1.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-common-core 0:2.2.18-1.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-eap5-native 0:5.1.2-1.4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-ejb3-core 0:1.3.8-0.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-ejb3-proxy-clustered 0:1.0.3-2.SP1.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-ejb3-proxy-impl 0:1.0.6-2.SP2.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-el 0:1.0_02-0.CR6.2.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-messaging 0:1.4.8-9.SP5.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-naming 0:5.0.3-3.CP01.3.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-remoting 0:2.5.4-9.SP3.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-seam2 0:2.2.5.EAP5-6.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-seam2-docs 0:2.2.5.EAP5-6.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-seam2-examples 0:2.2.5.EAP5-6.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-seam2-runtime 0:2.2.5.EAP5-6.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jboss-security-spi 1:2.0.4-6.SP8.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossas 0:5.1.2-8.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossas-client 0:5.1.2-8.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossas-messaging 0:5.1.2-8.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossas-tp-licenses 0:5.1.2-7.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossas-ws-cxf 0:5.1.2-8.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossas-ws-native 0:5.1.2-8.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbosssx2 0:2.0.4-6.SP8.2.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossts 1:4.6.1-11.CP12.4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossts-javadoc 1:4.6.1-11.CP12.4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossweb 0:2.1.12-1.4_patch_01.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossweb-el-1.0-api 0:2.1.12-1.4_patch_01.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossweb-jsp-2.1-api 0:2.1.12-1.4_patch_01.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossweb-lib 0:2.1.12-1.4_patch_01.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossweb-servlet-2.5-api 0:2.1.12-1.4_patch_01.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossws 0:3.1.2-7.SP11.4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossws-common 0:1.1.0-6.SP8_patch_01.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossws-framework 0:3.1.2-6.SP10.2.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jbossws-spi 0:1.1.2-5.SP7.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jgroups 1:2.6.20-1.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jopr-embedded 0:1.3.4-18.SP5.8.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jopr-hibernate-plugin 0:3.0.0-14.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jopr-jboss-as-5-plugin 0:3.0.0-13.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 jopr-jboss-cache-v3-plugin 0:3.0.0-14.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 mod_cluster 0:1.0.10-3.GA_CP02.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 mod_cluster-demo 0:1.0.10-3.GA_CP02.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 mod_cluster-jbossas 0:1.0.10-3.GA_CP02.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 mod_cluster-jbossweb2 0:1.0.10-3.GA_CP02.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 mod_cluster-native 0:1.0.10-3.GA_CP02.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 mod_cluster-native-debuginfo 0:1.0.10-3.GA_CP02.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 mod_cluster-tomcat6 0:1.0.10-3.GA_CP02.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 org-mc4j-ems 0:1.2.15.1-4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 picketlink-federation 0:2.0.2-1.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 picketlink-federation-webapp-idp 0:2.0.2-1.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 picketlink-federation-webapp-pdp 0:2.0.2-1.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 picketlink-federation-webapp-sts 0:2.0.2-1.1.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 resteasy 0:1.2.1-9.CP02.4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 resteasy-examples 0:1.2.1-9.CP02.4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 resteasy-javadoc 0:1.2.1-9.CP02.4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 resteasy-manual 0:1.2.1-9.CP02.4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rh-eap-docs 0:5.1.2-6.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rh-eap-docs-examples 0:5.1.2-6.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq 0:3.0.0-21.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq-common-parent 0:3.0.0-21.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq-core-client-api 0:3.0.0-21.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq-core-comm-api 0:3.0.0-21.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq-core-domain 0:3.0.0-21.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq-core-gui 0:3.0.0-21.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq-core-native-system 0:3.0.0-21.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq-core-parent 0:3.0.0-21.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq-core-plugin-api 0:3.0.0-21.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq-core-plugin-container 0:3.0.0-21.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq-core-util 0:3.0.0-21.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq-jboss-as-common 0:3.0.0-21.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq-jmx-plugin 0:3.0.0-21.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq-modules-parent 0:3.0.0-21.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq-parent 0:3.0.0-21.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq-platform-plugin 0:3.0.0-14.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 rhq-plugins-parent 0:3.0.0-21.EmbJopr4.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 slf4j 0:1.5.8-10_patch_01.2.ep5.el4
Red Hat · JBoss EAP 5 jboss_enterprise_application_platform:5::el4 xalan-j2 0:2.7.1-6_patch_05.1.ep5.el4

Vulnerabilities 2

  • Unscored —
    CVE-2011-4085 Exploited

    The servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA Platform before 5.2.0…

  • Medium —
    CVE-2011-4314

    OpenID4Java does not verify that Attribute Exchange (AX) information is signed

    message/ax/AxMessage.java in OpenID4Java before 0.9.6 final, as used in JBoss Enterprise Application Platform 5.1 before 5.1.2, Step2, Kay Framework before 1.0.2, and possibly other products does not verify that Attribute Exchange (AX) information is signed, …

    org.openid4java:openid4java openid4java Debian Maven

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://docs.redhat.com/docs/en-US/index.html
  • article
    https://access.redhat.com/support/offerings/techpreview/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=733737
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=750422
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=754386
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1800.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-4085
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-4085
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-4085
  • report
    https://access.redhat.com/security/cve/CVE-2011-4314
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-4314
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-4314