Vulnerabilities > Redhat > Jboss Operations Network > 3.2.4

DATE CVE VULNERABILITY TITLE RISK
2019-10-03 CVE-2019-3834 Unsafe Reflection vulnerability in Redhat Jboss Operations Network
It was found that the fix for CVE-2014-0114 had been reverted in JBoss Operations Network 3 (JON).
network
low complexity
redhat CWE-470
7.3
2016-09-07 CVE-2016-5422 Permissions, Privileges, and Access Controls vulnerability in Redhat Jboss Operations Network
The web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly authorize requests to add users with the super user role, which allows remote authenticated users to gain admin privileges via a crafted POST request.
network
low complexity
redhat CWE-264
8.8
2016-08-02 CVE-2016-3737 Improper Input Validation vulnerability in Redhat Jboss Operations Network
The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization.
network
low complexity
redhat CWE-20
critical
9.8