eap7-apache-cxf vulnerabilities (Red Hat)
156 vulnerabilities.
-
eap7-apache-cxfRed Hat ajv has ReDoS when using `$data` option 2.9 Low -
eap7-apache-cxfRed Hat node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal 8.2 High -
eap7-apache-cxfRed Hat Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection 8.3 High -
eap7-apache-cxfRed Hat Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions 6.9 Medium -
eap7-apache-cxfRed Hat Eclipse Vert.x Web static handler file access denial 6.9 Medium -
eap7-apache-cxfRed Hat Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf 9.6 Critical -
eap7-apache-cxfRed Hat arrayLimit bypass in bracket notation allows DoS via memory exhaustion 6.3 Medium -
eap7-apache-cxfRed Hat Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded 7.5 High -
eap7-apache-cxfRed Hat Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes 8.5 High -
eap7-apache-cxfRed Hat Undertow: undertow madeyoureset http/2 ddos vulnerability 7.5 High -
eap7-apache-cxfRed Hat Apache CXF: Untrusted JMS configuration can lead to RCE 9.8 Critical -
eap7-apache-cxfRed Hat jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data 8.7 High -
eap7-apache-cxfRed Hat hibernate-validator insecure default Expression Language interpolation 6.9 Medium -
eap7-apache-cxfRed Hat Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 8.8 High -
eap7-apache-cxfRed Hat XXE vulnerability in Eclipse JGit 6.8 Medium -
eap7-apache-cxfRed Hat Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution 6.2 Medium -
eap7-apache-cxfRed Hat HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store 4.6 Medium -
eap7-apache-cxfRed Hat Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli 8.1 High -
eap7-apache-cxfRed Hat Apache CXF: Denial of Service vulnerability with temporary files 5.9 Medium -
eap7-apache-cxfRed Hat Org.jboss.hal:hal-console: wildfly hal console cross-site scripting 6.5 Medium -
eap7-apache-cxfRed Hat Wildfly: wildfly vulnerable to cross-site scripting (xss) 6.1 Medium -
eap7-apache-cxfRed Hat Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK) 9.2 Critical -
eap7-apache-cxfRed Hat jose4j is vulnerable to DoS via compressed JWE content 7.5 High -
eap7-apache-cxfRed Hat Undertow: cookie smuggling/spoofing 7.4 High -
eap7-apache-cxfRed Hat Undertow: unrestricted request storage leads to memory exhaustion 7.5 High -
eap7-apache-cxfRed Hat Stack overflow in Protocol Buffers Java Lite 8.7 High -
eap7-apache-cxfRed Hat Eap: wildfly-elytron has a ssrf security issue 7.3 High -
eap7-apache-cxfRed Hat Xnio: stackoverflowexception when the chain of notifier states becomes problematically big 7.5 High -
eap7-apache-cxfRed Hat Apache CXF SSRF Vulnerability using the Aegis databinding 9.3 Critical -
eap7-apache-cxfRed Hat Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol 7.5 High -
eap7-apache-cxfRed Hat Undertow: directory traversal vulnerability 5.3 Medium -
eap7-apache-cxfRed Hat Eap-7: heap exhaustion via deserialization 7.5 High -
eap7-apache-cxfRed Hat Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
eap7-apache-cxfRed Hat Netty MadeYouReset HTTP/2 DDoS Vulnerability 8.2 High -
eap7-apache-cxfRed Hat Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 7.5 High -
eap7-apache-cxfRed Hat Apache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender 7.5 High -
eap7-apache-cxfRed Hat Apache CXF SSRF Vulnerability 9.8 Critical -
eap7-apache-cxfRed Hat Apache CXF directory listing / code exfiltration 7.5 High -
eap7-apache-cxfRed Hat Jettison Out-of-bounds Write vulnerability 7.5 High -
eap7-apache-cxfRed Hat HAProxyMessageDecoder Stack Exhaustion DoS 5.3 Medium -
eap7-apache-cxfRed Hat Remote Code execution in SnakeYAML 8.3 High -
eap7-apache-cxfRed Hat Apache MINA SSHD: Java unsafe deserialization vulnerability 9.8 Critical -
eap7-apache-cxfRed Hat Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults 9.8 Critical -
eap7-apache-cxfRed Hat Remote code execution in HyperSQL DataBase 8.0 High -
eap7-apache-cxfRed Hat Uncontrolled Resource Consumption in FasterXML jackson-databind 7.5 High -
eap7-apache-cxfRed Hat Uncontrolled Resource Consumption in Jackson-databind 7.5 High -
eap7-apache-cxfRed Hat Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets 7.5 High -
eap7-apache-cxfRed Hat Undertow vulnerable to Denial of Service (DoS) attacks 7.5 High -
eap7-apache-cxfRed Hat Undertow Uncontrolled Resource Consumption 5.9 Medium -
eap7-apache-cxfRed Hat Wildfly-Core user account mismanagement 7.8 High - Show olderLoading…