CVE-2017-12149 — Red Hat JBoss Application Server Remote Code Execution Vulnerability

Known ransomware use CISA KEV listed Added December 10, 2021 Remediate by June 10, 2022

Description

The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2017-12149

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer