ACTIVELY EXPLOITED
CVE-2017-12149: Red Hat JBoss Application Server Remote Code Execution Vulnerability
| Vendor | Red Hat |
|---|---|
| Product | JBoss Application Server |
| Actively exploited | Yes |
| Added to CISA KEV | 10 Dec 2021 |
| CISA federal deadline | 10 Jun 2022 |
| Ransomware use | Known |
| Weakness (CWE) | CWE-502 |
Required action (CISA's text)
Apply updates per vendor instructions.
Description (NVD)
The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.
SOURCES
Other Red Hat flaws
- CVE-2015-5287: Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
- CVE-2015-3246: Red Hat Libuser Race Condition Vulnerability
- CVE-2018-14667: Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
- CVE-2021-3560: Red Hat Polkit Incorrect Authorization Vulnerability
- CVE-2021-4034: Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.