Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2011-1096

EPSS 1.17% · P79
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2011-1096

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss Enterprise Portal Platform before 5.2.2 and other products, when using block ciphers in cipher-block chaining (CBC) mode, allows remote attackers to obtain plaintext data via a chosen-ciphertext attack on SOAP responses, aka "character encoding pattern attack."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Red Hat JBossWS 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat JBossWS是美国红帽（Red Hat）公司的一套Web服务框架，它是JBoss Application Server（基于Java EE的开源的应用服务器）的一部分。 Red Hat JBossWS 5.2.2之前版本存在加密问题漏洞。远程攻击者获得敏感数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2011-1096

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2011-1096

请登录查看更多情报信息。

Same Patch Batch · n/a · 2012-11-23 · 32 CVEs total

CVE-2012-3516Xen ‘GNTTABOP_swap_grant_ref’拒绝服务漏洞
CVE-2012-5759IBM WebSphere DataPower XC10 权限许可和访问控制漏洞
CVE-2012-5758IBM WebSphere DataPower XC10 Appliance接口设计漏洞
CVE-2012-5756IBM WebSphere DataPower XC10 Appliance 加密问题漏洞
CVE-2012-5173BIGACE Web CMS 会话固定漏洞
CVE-2010-1330JRuby 正则表达式引擎中跨站脚本漏洞
CVE-2012-6036Xen Transcendent Memory 拒绝服务漏洞
CVE-2012-6035Xen Transcendent Memory 拒绝服务漏洞
CVE-2012-6034Xen Transcendent Memory 任意代码漏洞
CVE-2012-6033Xen Transcendent Memory ‘do_tmem_control’函数安全漏洞
CVE-2012-6032Xen Transcendent Memory 整数溢出漏洞
CVE-2012-6031Xen Transcendent Memory ‘do_tmem_get’函数拒绝服务漏洞
CVE-2012-6030Xen Transcendent Memory ‘do_tmem_op’函数拒绝服务漏洞
CVE-2012-4602TCExam 多个跨站脚本漏洞
CVE-2012-4601TCExam 多个SQL注入漏洞
CVE-2012-4411Xen 信息泄露漏洞
CVE-2011-2908Red Hat JBoss Enterprise Application Platform 跨站请求伪造漏洞
CVE-2012-3515Xen 输入验证错误漏洞
CVE-2012-3498Xen ‘PHYSDEVOP_map_pirq’索引拒绝服务漏洞
CVE-2012-3497Xen ‘TMEM hypercall’多个安全漏洞

Showing top 20 of 32 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2011-1096

No comments yet

Leave a comment