CVE-2017-12149 Red Hat JBoss Application Server
The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.
- CVSS
- not scored
On CISA’s exploited list
Red Hat JBoss Application Server Remote Code Execution Vulnerability
- Added
- 2021-12-10
- Federal patch deadline
- 2022-06-10
- Ransomware use
- known