Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 20:54:11 +0000 CVE-2015-5188 https://db.gcve.eu/vuln/cve-2015-5188 <p>Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) before 2.0.0.CR9 allows remote attackers to hijack the authentication of administrators for requests that make arbitrary changes to an instance via vectors involving a file upload using a multipart/form-data submission.</p> <p>Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) before 2.0.0.CR9 allows remote attackers to hijack the authentication of administrators for requests that make arbitrary changes to an instance via vectors involving a file upload using a multipart/form-data submission.</p> https://db.gcve.eu/vuln/cve-2015-5188 RHSA-2015:1904 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.4 update https://db.gcve.eu/vuln/rhsa-2015:1904 <p>AS/WildFly: missing X-Frame-Options header leading to clickjacking EAP: CSRF vulnerability in EAP &amp; WildFly Web Console OOME from EAP 6 http management console</p> <p>AS/WildFly: missing X-Frame-Options header leading to clickjacking EAP: CSRF vulnerability in EAP &amp; WildFly Web Console OOME from EAP 6 http management console</p> https://db.gcve.eu/vuln/rhsa-2015:1904