CVE-2017-12149 — Actively Exploited: JBoss Application Server (Red Hat)
The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.
| CVE ID | CVE-2017-12149 |
|---|---|
| Vendor | Red Hat |
| Product | JBoss Application Server |
| Vulnerability name | Red Hat JBoss Application Server Remote Code Execution Vulnerability |
| Date added | 2021-12-10 |
| Remediation due | 2022-06-10 |
| Known ransomware use | Known |
| Required action | Apply updates per vendor instructions. |
| Description | The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data. |
| Source | CISA Known Exploited Vulnerabilities |
🔍 Search all exploited vulnerabilities →
$1499/mo
Try ExploitWatch →