VULNERABILITY INTELLIGENCE

CVE-2015-0297

CVSS score9 HIGH
EPSS probability2.18%
CISA KEVNot currently listed
Published2015-04-24
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:C

Description

Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the (1) ServerInvokerServlet or (2) SchedulerService or (3) cause a denial of service (disk consumption) via the ContentManager.

Weakness classification

  • CWE-284: Improper Access Control

Primary references