CVE-2006-3733

jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allows remote attackers to gain privileges as the CS-MARS administrator and execute arbitrary Java code via an invokeOp action in the BSHDeployer jboss.scripts service name.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

11.97% chance of exploitation in the next 30 days, 96th percentile

Published

2006-07-19

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/28245

References

• CVE Record
• NVD entry

Related

• CVE-2006-3730
• CVE-2006-3734
• CVE-2006-3729
• CVE-2006-3735
• CVE-2006-3727
• CVE-2006-3736