JGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before 5.3.0, and BRMS Platform before 5.3.0, is enabled without authentication when started by the JGroups. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.
Authentication Bypass
Jboss Enterprise Portal Platform
Jboss Enterprise Soa Platform
Jboss Enterprise Brms Platform
NVD
CVSS 2.0
3.3
EPSS
1.0%
The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity.
Privilege Escalation
Denial Of Service
Citrix
Xenserver
Xen
NVD
CVSS 2.0
2.1
EPSS
0.1%