eap7-apache-cxf-rt vulnerabilities (Red Hat)
162 vulnerabilities.
eap7-apache-cxf-rtRed HatLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumeap7-apache-cxf-rtRed HatDeserialization of Untrusted Data7.7 Higheap7-apache-cxf-rtRed HatPrototype Pollution in minimist9.8 Criticaleap7-apache-cxf-rtRed HatArbitrary code execution in H2 Console9.8 Criticaleap7-apache-cxf-rtRed HatA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.8.8 Higheap7-apache-cxf-rtRed HatSQL injection in JDBC Appender in Apache Log4j V19.8 Criticaleap7-apache-cxf-rtRed HatApache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack9.0 Criticaleap7-apache-cxf-rtRed HatDeserialization of untrusted data in JMSAppender in Apache Log4j 1.27.5 Higheap7-apache-cxf-rtRed HatApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints10.0 Criticaleap7-apache-cxf-rtRed HatCross-site Scripting (XSS)3.1 Loweap7-apache-cxf-rtRed HatBypass of the secureValidation property7.5 Higheap7-apache-cxf-rtRed HatCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions7.5 Higheap7-apache-cxf-rtRed HatObservable Discrepancy in Wildfly Elytron5.3 Mediumeap7-apache-cxf-rtRed HatPrivilege Context Switching Error in wildlfy5.4 Mediumeap7-apache-cxf-rtRed HatDirectory traversal in Eclipse Mojarra6.5 Mediumeap7-apache-cxf-rtRed HatUncontrolled Resource Consumption in XNIO5.9 Mediumeap7-apache-cxf-rtRed HatPermissions bypass in SmallRye4.4 Mediumeap7-apache-cxf-rtRed HatCross-site scripting in RESTEasy6.1 Mediumeap7-apache-cxf-rtRed HatExposure of class information in RESTEasy5.3 Mediumeap7-apache-cxf-rtRed HatVelocity Sandbox Bypass8.8 Higheap7-apache-cxf-rtRed HatLogic error in Legion of the Bouncy Castle BC Java8.1 Higheap7-apache-cxf-rtRed HatA flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy...6.5 Mediumeap7-apache-cxf-rtRed HatImproper Input Validation in Xerces5.3 Mediumeap7-apache-cxf-rtRed HatAllocation of Resources Without Limits or Throttling in Undertow7.5 Higheap7-apache-cxf-rtRed HatHTTP Request Smuggling in Undertow6.5 Mediumeap7-apache-cxf-rtRed HatImproper Input Validation in RESTEasy7.5 Higheap7-apache-cxf-rtRed HatA flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently...4.2 Mediumeap7-apache-cxf-rtRed HatImproper Authorization in Undertoe8.6 Higheap7-apache-cxf-rtRed HatImproper Input Validation in Undertow8.1 Higheap7-apache-cxf-rtRed HatApache CXF JMX Integration is vulnerable to a MITM attack5.3 Mediumeap7-apache-cxf-rtRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Higheap7-apache-cxf-rtRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Higheap7-apache-cxf-rtRed HatInadequate Encryption Strength and Algorithm Downgrade in Wildfly7.4 Higheap7-apache-cxf-rtRed HatPolymorphic deserialization of malicious object in jackson-databind7.5 Higheap7-apache-cxf-rtRed HatPolymorphic deserialization of malicious object in jackson-databind7.5 Higheap7-apache-cxf-rtRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticaleap7-apache-cxf-rtRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticaleap7-apache-cxf-rtRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticaleap7-apache-cxf-rtRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticaleap7-apache-cxf-rtRed HatHTTP Request Smuggling in Netty7.5 Higheap7-apache-cxf-rtRed HatDenial of Service in Cryptacular7.5 Higheap7-apache-cxf-rtRed HatUndertow vulnerable to Uncontrolled Resource Consumption7.5 Higheap7-apache-cxf-rtRed HatA flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential...5.4 Mediumeap7-apache-cxf-rtRed HatReflected Cross-Site Scripting in Apache CXF6.1 Mediumeap7-apache-cxf-rtRed HatPrivate key leak in Apache CXF7.5 Higheap7-apache-cxf-rtRed HatA flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests...7.5 Higheap7-apache-cxf-rtRed HatImproper Restriction of XML External Entity Reference in jackson-mapper-asl5.9 Mediumeap7-apache-cxf-rtRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 Mediumeap7-apache-cxf-rtRed HatLoop with Unreachable Exit Condition in Apache Thrift7.5 Higheap7-apache-cxf-rtRed HatOut-of-bounds read in Apache Thrift7.5 High- Show moreLoading…