← Vulnerability feed

Vulnerability record · CVE-2006-3733 · published 21 July 2006

CVE-2006-3733: Cisco security monitoring analysis and response system permissions and access controls vulnerability

Cisco · Security Monitoring Analysis And Response System

jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allows remote attackers to gain privileges as the CS-MARS administrator and execute arbitrary Java code via an invokeOp action in the BSHDeployer jboss.scripts service name.

7.5 CVSS 2.0 High EPSS 12% · top 4.0% CWE-264 · Permissions and access controls
7.5CVSS 2.0 base score
12%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
20References
16 Jun 2026Last modified by NVD

Description

jmx-console/HtmlAdaptor in the jmx-console in the JBoss web application server, as shipped with Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.1, allows remote attackers to gain privileges as the CS-MARS administrator and execute arbitrary Java code via an invokeOp action in the BSHDeployer jboss.scripts service name.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0424.html
http://secunia.com/advisories/21118 Vendor Advisory
http://securitytracker.com/id?1016537
http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml Patch
http://www.osvdb.org/27419
http://www.securityfocus.com/archive/1/440641/100/100/threaded
http://www.securityfocus.com/bid/19071 Patch
http://www.securityfocus.com/bid/19075
http://www.vupen.com/english/advisories/2006/2887 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27811
http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0424.html
http://secunia.com/advisories/21118 Vendor Advisory
http://securitytracker.com/id?1016537
http://www.cisco.com/warp/public/707/cisco-sa-20060719-mars.shtml Patch
http://www.osvdb.org/27419
http://www.securityfocus.com/archive/1/440641/100/100/threaded
http://www.securityfocus.com/bid/19071 Patch
http://www.securityfocus.com/bid/19075
http://www.vupen.com/english/advisories/2006/2887 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27811

Track CVE-2006-3733 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.4CVE-2007-0397Cisco security monitoring analysis and response system vulnerabilityThe Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.2.3 and Adaptive Security Device Manager (ASDM) before 5.2(2.54) do no…EPSS 2.9%4.3CVE-2013-5563Cisco security monitoring analysis and response system cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in Query/NewQueryResult.jsp in Cisco Security Monitoring, Analysis and Response System (CS-MARS) allows remo…EPSS 0.96%4.3CVE-2013-1140Cisco security monitoring analysis and response system information exposure vulnerabilityThe XML parser in Cisco Security Monitoring, Analysis, and Response System (MARS) allows remote attackers to read arbitrary files via an external ent…EPSS 1.2%5.1CVE-2015-3246libuser userhelper direct /etc/passwd write race conditionlibuser before 0.56.13-8 and 0.60 before 0.60-7, as used by the userhelper program in the usermode package, modifies /etc/passwd directly instead of …KEVEPSS 8.8%analysed6.6CVE-2015-1769Windows Mount Manager symlink mishandling allows local privilege escalationThe Windows Mount Manager mishandles symbolic links, allowing a crafted USB device to trigger arbitrary code execution. Because the flaw is in a core…KEVEPSS 4.1%analysed7.8CVE-2016-3643SolarWinds Virtualization Manager sudo misconfiguration privilege escalationSolarWinds Virtualization Manager 6.3.1 and earlier ship with a misconfigured sudo policy that lets a local user run privileged commands, as shown by…KEVEPSS 3.7%analysed

Source: NIST National Vulnerability Database (record CVE-2006-3733), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.