RHSA-2017%3A0457 — Vulnetix

RHSA-2017%3A0457 PUBLISHED CVSS 3.700000047683716 LOW

An update is now available for Red Hat JBoss Web Server. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Risk Scores

CVSS 3.1

3.700000047683716

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Products

Vendor	Product	Versions
	Red Hat JBoss Web Server 3.1

Exploit Intelligence

Reproducible exploits for: CVE-2016-1240 CVE-2008-2938 CVE-2014-2064 CVE-2014-1904 (github-poc-repo)
Reproducible exploits for: CVE-2016-1240 CVE-2008-2938 CVE-2014-2064 CVE-2014-1904 (github-poc-repo)
CVE-2016-1240 exploit and patch (github-poc-repo)
CVE-2016-1240 exploit and patch (github-poc-repo)
ianxtianxt/CVE-2016-8735 (github-poc-repo)
ianxtianxt/CVE-2016-8735 (github-poc-repo)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog (redhat)
http://legalhackers.com/advisories/Tomcat-DebPkgs-Root-Privilege-Escalation-Exploit-CVE-2016-1240.txt (redhat)
ianxtianxt/CVE-2016-8735 (github-poc)
CVE-2016-1240 exploit and patch (github-poc)

…and 29 more exploits

Timeline

Mar 7, 2017 CVE Published
Dec 15, 2024 CVE Updated
Apr 6, 2026 Distribution Patch
Apr 6, 2026 Distribution Patch
Apr 6, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory

References

Open in Interactive Console →