CVE-2017-12149—Red Hat JBoss Application Server Remote Code Execution Vulnerability

PUBLISHEDvulnerability record
2021-12-10 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2017-12149
Project:
Red Hat
Product:
JBoss Application Server
Date Added:
2021-12-10
Due Date:
2022-06-10
Last Updated:
June 21, 2025

Vulnerability Name

Red Hat JBoss Application Server Remote Code Execution Vulnerability

Description

The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

  • https://nvd.nist.gov/vuln/detail/CVE-2017-12149

Related Weaknesses

browse all CVEs