apache-commons-net vulnerabilities (Red Hat)

36 vulnerabilities.

• apache-commons-net Red Hat jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation CVE-2026-54512 Public exploitFix available 8.1 HighJune 23, 2026
• apache-commons-net Red Hat jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) CVE-2026-54513 Fix available 8.1 HighJune 23, 2026
• apache-commons-net Red Hat Plexus-Utils has a Directory Traversal vulnerability in its extractFile method CVE-2025-67030 Fix available 8.8 HighMarch 25, 2026
• apache-commons-net Red Hat Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled CVE-2025-55752 Public exploitFix available EPSS 64.4% 7.5 HighOctober 27, 2025
• apache-commons-net Red Hat jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data CVE-2025-52999 Public exploitFix available 8.7 HighJune 25, 2025
• apache-commons-net Red Hat Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default CVE-2025-48734 Public exploitFix available 8.8 HighMay 28, 2025
• apache-commons-net Red Hat Apache Tomcat: Bypass of rules in Rewrite Valve CVE-2025-31651 Public exploitFix available 9.8 CriticalApril 28, 2025
• apache-commons-net Red Hat Apache Tomcat: Denial of Service CVE-2024-38286 Fix available 8.6 HighAugust 21, 2024
• apache-commons-net Red Hat Deeply nested json in jackson-databind CVE-2020-36518 Public exploitFix available 7.5 HighMarch 11, 2022
• apache-commons-net Red Hat Response mix-up with WebSocket concurrent send and close CVE-2022-25762 Fix available 8.6 HighNovember 3, 2020
• apache-commons-net Red Hat A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a... CVE-2020-25715 Fix available 6.1 MediumNovember 3, 2020
• apache-commons-net Red Hat A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it... CVE-2020-1721 Fix available 6.1 MediumNovember 3, 2020
• apache-commons-net Red Hat In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests... CVE-2020-15720 Fix available 6.8 MediumJuly 14, 2020
• apache-commons-net Red Hat Improper Input Validation in RESTEasy CVE-2020-1695 Fix available 7.5 HighMay 19, 2020
• apache-commons-net Red Hat Potential XSS vulnerability in jQuery CVE-2020-11023 In KEVPublic exploitFix available EPSS 84.9% 6.9 MediumApril 29, 2020
• apache-commons-net Red Hat jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• apache-commons-net Red Hat A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA)... CVE-2019-10179 Fix available 4.3 MediumMarch 20, 2020
• apache-commons-net Red Hat A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where... CVE-2019-10221 Fix available 4.3 MediumMarch 20, 2020
• apache-commons-net Red Hat A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the... CVE-2019-10146 Fix available 4.7 MediumMarch 18, 2020
• apache-commons-net Red Hat Improper Privilege Management in Tomcat CVE-2020-1938 In KEVPublic exploitFix available EPSS 99.3% 9.8 CriticalFebruary 24, 2020
• apache-commons-net Red Hat Potential HTTP request smuggling in Apache Tomcat CVE-2020-1935 Fix available 4.8 MediumFebruary 24, 2020
• apache-commons-net Red Hat Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019
• apache-commons-net Red Hat XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• apache-commons-net Red Hat Bootstrap Vulnerable to Cross-Site Scripting CVE-2019-8331 Public exploitFix available EPSS 16.4% 6.1 MediumFebruary 20, 2019
• apache-commons-net Red Hat Bootstrap Cross-site Scripting vulnerability CVE-2016-10735 Public exploitFix available 6.1 MediumJanuary 9, 2019
• apache-commons-net Red Hat Bootstrap Cross-site Scripting vulnerability CVE-2018-14042 Public exploitFix available 6.1 MediumJuly 13, 2018
• apache-commons-net Red Hat Bootstrap vulnerable to Cross-Site Scripting (XSS) CVE-2018-14040 Public exploitFix available 6.1 MediumJuly 13, 2018
• apache-commons-net Red Hat Cross-Site Scripting (XSS) in jquery CVE-2015-9251 Public exploitFix available EPSS 29.7% 6.1 MediumJanuary 18, 2018
• apache-commons-net Red Hat Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit... CVE-2015-3235 6.0 MediumAugust 14, 2015
• apache-commons-net Red Hat Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,... CVE-2015-3155 5.0 MediumAugust 14, 2015
• apache-commons-net Red Hat Foreman before 1.7.5 allows remote authenticated users to bypass organization and location... CVE-2015-1844 4.0 MediumAugust 14, 2015
• apache-commons-net Red Hat Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in... CVE-2015-1816 5.0 MediumAugust 14, 2015
• apache-commons-net Red Hat Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1... CVE-2014-3653 4.3 MediumJuly 6, 2015
• apache-commons-net Red Hat SimpleGeo python-oauth2 does not check the nonce allowing replay attacks CVE-2013-4346 Fix available 4.3 MediumMay 20, 2014
• apache-commons-net Red Hat SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces CVE-2013-4347 Fix available 5.8 MediumOctober 25, 2013
• apache-commons-net Red Hat Apache Tomcat affected by vulnerability in TLS and SSL protocol CVE-2009-3555 Public exploitFix available EPSS 87.3% 5.8 MediumNovember 9, 2009