eap7-apache-cxf-rt vulnerabilities (Red Hat)
156 vulnerabilities.
-
eap7-apache-cxf-rtRed Hat ajv has ReDoS when using `$data` option 2.9 Low -
eap7-apache-cxf-rtRed Hat node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal 8.2 High -
eap7-apache-cxf-rtRed Hat Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection 8.3 High -
eap7-apache-cxf-rtRed Hat Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions 6.9 Medium -
eap7-apache-cxf-rtRed Hat Eclipse Vert.x Web static handler file access denial 6.9 Medium -
eap7-apache-cxf-rtRed Hat Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf 9.6 Critical -
eap7-apache-cxf-rtRed Hat arrayLimit bypass in bracket notation allows DoS via memory exhaustion 6.3 Medium -
eap7-apache-cxf-rtRed Hat Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded 7.5 High -
eap7-apache-cxf-rtRed Hat Angular Stored XSS Vulnerability via SVG Animation, SVG URL and MathML Attributes 8.5 High -
eap7-apache-cxf-rtRed Hat Undertow: undertow madeyoureset http/2 ddos vulnerability 7.5 High -
eap7-apache-cxf-rtRed Hat Apache CXF: Untrusted JMS configuration can lead to RCE 9.8 Critical -
eap7-apache-cxf-rtRed Hat jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data 8.7 High -
eap7-apache-cxf-rtRed Hat hibernate-validator insecure default Expression Language interpolation 6.9 Medium -
eap7-apache-cxf-rtRed Hat Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 8.8 High -
eap7-apache-cxf-rtRed Hat XXE vulnerability in Eclipse JGit 6.8 Medium -
eap7-apache-cxf-rtRed Hat Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution 6.2 Medium -
eap7-apache-cxf-rtRed Hat HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store 4.6 Medium -
eap7-apache-cxf-rtRed Hat Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli 8.1 High -
eap7-apache-cxf-rtRed Hat Apache CXF: Denial of Service vulnerability with temporary files 5.9 Medium -
eap7-apache-cxf-rtRed Hat Org.jboss.hal:hal-console: wildfly hal console cross-site scripting 6.5 Medium -
eap7-apache-cxf-rtRed Hat Wildfly: wildfly vulnerable to cross-site scripting (xss) 6.1 Medium -
eap7-apache-cxf-rtRed Hat Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK) 9.2 Critical -
eap7-apache-cxf-rtRed Hat jose4j is vulnerable to DoS via compressed JWE content 7.5 High -
eap7-apache-cxf-rtRed Hat Undertow: cookie smuggling/spoofing 7.4 High -
eap7-apache-cxf-rtRed Hat Undertow: unrestricted request storage leads to memory exhaustion 7.5 High -
eap7-apache-cxf-rtRed Hat Stack overflow in Protocol Buffers Java Lite 8.7 High -
eap7-apache-cxf-rtRed Hat Eap: wildfly-elytron has a ssrf security issue 7.3 High -
eap7-apache-cxf-rtRed Hat Xnio: stackoverflowexception when the chain of notifier states becomes problematically big 7.5 High -
eap7-apache-cxf-rtRed Hat Apache CXF SSRF Vulnerability using the Aegis databinding 9.3 Critical -
eap7-apache-cxf-rtRed Hat Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol 7.5 High -
eap7-apache-cxf-rtRed Hat Undertow: directory traversal vulnerability 5.3 Medium -
eap7-apache-cxf-rtRed Hat Eap-7: heap exhaustion via deserialization 7.5 High -
eap7-apache-cxf-rtRed Hat Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
eap7-apache-cxf-rtRed Hat Netty MadeYouReset HTTP/2 DDoS Vulnerability 8.2 High -
eap7-apache-cxf-rtRed Hat Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 7.5 High -
eap7-apache-cxf-rtRed Hat Apache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender 7.5 High -
eap7-apache-cxf-rtRed Hat Apache CXF SSRF Vulnerability 9.8 Critical -
eap7-apache-cxf-rtRed Hat Apache CXF directory listing / code exfiltration 7.5 High -
eap7-apache-cxf-rtRed Hat Jettison Out-of-bounds Write vulnerability 7.5 High -
eap7-apache-cxf-rtRed Hat HAProxyMessageDecoder Stack Exhaustion DoS 5.3 Medium -
eap7-apache-cxf-rtRed Hat Remote Code execution in SnakeYAML 8.3 High -
eap7-apache-cxf-rtRed Hat Apache MINA SSHD: Java unsafe deserialization vulnerability 9.8 Critical -
eap7-apache-cxf-rtRed Hat Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults 9.8 Critical -
eap7-apache-cxf-rtRed Hat Remote code execution in HyperSQL DataBase 8.0 High -
eap7-apache-cxf-rtRed Hat Uncontrolled Resource Consumption in FasterXML jackson-databind 7.5 High -
eap7-apache-cxf-rtRed Hat Uncontrolled Resource Consumption in Jackson-databind 7.5 High -
eap7-apache-cxf-rtRed Hat Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets 7.5 High -
eap7-apache-cxf-rtRed Hat Undertow vulnerable to Denial of Service (DoS) attacks 7.5 High -
eap7-apache-cxf-rtRed Hat Undertow Uncontrolled Resource Consumption 5.9 Medium -
eap7-apache-cxf-rtRed Hat Wildfly-Core user account mismanagement 7.8 High - Show olderLoading…