CVE-2017-12149Used in ransomware
Red Hat JBoss Application Server
Red Hat JBoss Application Server Remote Code Execution Vulnerability
What it is
The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Red Hat entries on the list
- Automatic Bug Reporting Tool Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability CVE-2015-5287 · Aug 26, 2026
- Libuser Red Hat Libuser Race Condition Vulnerability CVE-2015-3246 · Aug 26, 2026
- JBoss RichFaces Framework Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability CVE-2018-14667 · Sep 28, 2023
- Polkit Red Hat Polkit Incorrect Authorization Vulnerability CVE-2021-3560 · May 12, 2023
- Polkit Red Hat Polkit Out-of-Bounds Read and Write Vulnerability CVE-2021-4034 · Jun 27, 2022
- JBoss Red Hat JBoss Information Disclosure Vulnerability CVE-2010-1428 · May 25, 2022