Skip to content
CVE Tracker
Back

CVE-2012-5626

EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss…

High7.5EPSS 0.91%
Published
Updated
Reserved
Assigned by
redhat

Description

EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in Red Hat JBoss Enterprise Web Server 1 ignores roles specified using the @RunAs annotation.

Scores

CVSS scores of CVE-2012-5626, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.1High7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS (exploitation in 30 days)
0.91% · top 40% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

  • Other

Affected products

  • Red Hat · JBoss BRMS

    • affected 5

  • Red Hat · JBoss Enterprise Application Platform

    • affected 5

  • Red Hat · JBoss Operations Network

    • affected 3.1

  • Red Hat · JBoss Portal

    • affected 4
    • affected 5

  • Red Hat · JBoss SOA Platform

    • affected 4.2
    • affected 4.3
    • affected 5

  • Red Hat · JBoss Enterprise Web Server

    • affected 1

References (2)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .