← Back

Mod Cluster

mod_cluster

Vendor: Redhat • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Redhat
2Enterprise Linux
Mod Cluster
May 13, 2026
Apr 12, 2017
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9.
1Redhat
1Mod Cluster
May 6, 2026
Aug 24, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2.Alpha1 allows remote attackers to inject arbitrary web script or HTML via a crafted MCMP message.
1Redhat
2Jboss Enterprise Application Platform
Mod Cluster
Apr 29, 2026
Oct 22, 2012
N/A· v4
N/A· v3
4.3 MEDIUM· v2
mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when "ROOT" is set to excludedContexts, exposes the root context of the server, which allows remote at...Show more
mod_cluster 1.0.10 before 1.0.10 CP03 and 1.1.x before 1.1.4, as used in JBoss Enterprise Application Platform 5.1.2, when "ROOT" is set to excludedContexts, exposes the root context of the server, which allows remote attackers to bypass access restrictions and gain access to applications deployed on the root context via unspecified vectors.Show less