AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2011-4610

MEDIUM · CVSS 5 EPSS 2.17%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-02-10 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.0. It may be remotely exploitable. It may lead to a denial-of-service condition.

CVE
CVE-2011-4610
Severity
MEDIUM
CVSS
5
EPSS
2.17%

Original NVD Description

JBoss Web, as used in Red Hat JBoss Communications Platform before 5.1.3, Enterprise Web Platform before 5.1.2, Enterprise Application Platform before 5.1.2, and other products, allows remote attackers to cause a denial of service (infinite loop) via vectors related to a crafted UTF-8 and a "surrogate pair character" that is "at the boundary of an internal buffer."