RHSA-2018%3A1448 — Vulnetix

RHSA-2018%3A1448 PUBLISHED CVSS 6.599999904632568 MEDIUM

An update is now available for Red Hat JBoss Enterprise Application Platform 6.4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Risk Scores

CVSS 3.1

6.599999904632568

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

Affected Products

Vendor	Product	Versions
	jbossas
	jboss
	jbossts
	jgroups
	lucene
	codehaus
	jbossweb
	picketbox
	Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Server
	hornetq

Exploit Intelligence

Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告 (github-poc-repo)
Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告 (github-poc-repo)
Struts2の脆弱性S2-045, S2-055 および Jackson の脆弱性 CVE-2017-7525, CVE-2017-15095 の調査報告 (github-poc-repo)
tafamace/CVE-2017-17485 (github-poc-repo)
tafamace/CVE-2017-17485 (github-poc-repo)
tafamace/CVE-2017-17485 (github-poc-repo)
cve-2017-17485 PoC (github-poc-repo)
cve-2017-17485 PoC (github-poc-repo)
cve-2017-17485 PoC (github-poc-repo)
CVE-2017-17485:Jackson-databind RCE (github-poc-repo)

…and 37 more exploits

Timeline

May 14, 2018 CVE Published
Apr 10, 2026 Distribution Patch
Apr 10, 2026 Distribution Patch
Apr 10, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
Apr 30, 2026 Security Advisory
May 14, 2026 CVE Updated

References

Open in Interactive Console →