CISA KEVRansomware Use Known

CVE-2017-12149

Red Hat JBoss Application Server Remote Code Execution Vulnerability

The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.

VendorRed Hat

ProductJBoss Application Server

EPSS90.7%

Added to KEVDec 10, 2021

Remediation DueJun 10, 2022

Known Ransomware UseYes

CWECWE-502

Required Action

Apply updates per vendor instructions.

From Disclosure to Action

Know how quickly you need to move.

For CVE-2017-12149, added to the catalogue on Dec 10, 2021 with a remediation deadline of Jun 10, 2022.

Added to KEVDec 10, 2021

Seraph AlertSame day

Remediation DueJun 10, 2022

ValidationOngoing

Overdue1601 days overdue

Recommended action: Apply vendor remediation guidance.

Seraph Context

Technology Watch Match

Available for technologies you monitor inside Seraph CTI.

Relevant Threat Actors

Surfaced automatically when a tracked actor is linked to this CVE.

Sector Context

Shown when this vendor/product is relevant to your industry.

Exploitation Context

Campaign and indicator context, where Seraph analysts have published it.

References

https://nvd.nist.gov/vuln/detail/CVE-2017-12149

More from Red Hat in the KEV catalogue.

CVE-2015-5287Automatic Bug Reporting ToolAdded Aug 26, 2026 CVE-2015-3246LibuserAdded Aug 26, 2026 CVE-2018-14667JBoss RichFaces FrameworkAdded Sep 28, 2023

Does this affect technology you run?

Declare your technology stack inside Seraph CTI and get notified the moment a KEV entry matches it.

Explore Seraph CTI Back to KEV Catalogue