eap7-apache-cxf-services vulnerabilities (Red Hat)
162 vulnerabilities.
eap7-apache-cxf-servicesRed HatLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumeap7-apache-cxf-servicesRed HatDeserialization of Untrusted Data7.7 Higheap7-apache-cxf-servicesRed HatPrototype Pollution in minimist9.8 Criticaleap7-apache-cxf-servicesRed HatArbitrary code execution in H2 Console9.8 Criticaleap7-apache-cxf-servicesRed HatA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.8.8 Higheap7-apache-cxf-servicesRed HatSQL injection in JDBC Appender in Apache Log4j V19.8 Criticaleap7-apache-cxf-servicesRed HatApache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack9.0 Criticaleap7-apache-cxf-servicesRed HatDeserialization of untrusted data in JMSAppender in Apache Log4j 1.27.5 Higheap7-apache-cxf-servicesRed HatApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints10.0 Criticaleap7-apache-cxf-servicesRed HatCross-site Scripting (XSS)3.1 Loweap7-apache-cxf-servicesRed HatBypass of the secureValidation property7.5 Higheap7-apache-cxf-servicesRed HatCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions7.5 Higheap7-apache-cxf-servicesRed HatObservable Discrepancy in Wildfly Elytron5.3 Mediumeap7-apache-cxf-servicesRed HatPrivilege Context Switching Error in wildlfy5.4 Mediumeap7-apache-cxf-servicesRed HatDirectory traversal in Eclipse Mojarra6.5 Mediumeap7-apache-cxf-servicesRed HatUncontrolled Resource Consumption in XNIO5.9 Mediumeap7-apache-cxf-servicesRed HatPermissions bypass in SmallRye4.4 Mediumeap7-apache-cxf-servicesRed HatCross-site scripting in RESTEasy6.1 Mediumeap7-apache-cxf-servicesRed HatExposure of class information in RESTEasy5.3 Mediumeap7-apache-cxf-servicesRed HatVelocity Sandbox Bypass8.8 Higheap7-apache-cxf-servicesRed HatLogic error in Legion of the Bouncy Castle BC Java8.1 Higheap7-apache-cxf-servicesRed HatA flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy...6.5 Mediumeap7-apache-cxf-servicesRed HatImproper Input Validation in Xerces5.3 Mediumeap7-apache-cxf-servicesRed HatAllocation of Resources Without Limits or Throttling in Undertow7.5 Higheap7-apache-cxf-servicesRed HatHTTP Request Smuggling in Undertow6.5 Mediumeap7-apache-cxf-servicesRed HatImproper Input Validation in RESTEasy7.5 Higheap7-apache-cxf-servicesRed HatA flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently...4.2 Mediumeap7-apache-cxf-servicesRed HatImproper Authorization in Undertoe8.6 Higheap7-apache-cxf-servicesRed HatImproper Input Validation in Undertow8.1 Higheap7-apache-cxf-servicesRed HatApache CXF JMX Integration is vulnerable to a MITM attack5.3 Mediumeap7-apache-cxf-servicesRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Higheap7-apache-cxf-servicesRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Higheap7-apache-cxf-servicesRed HatInadequate Encryption Strength and Algorithm Downgrade in Wildfly7.4 Higheap7-apache-cxf-servicesRed HatPolymorphic deserialization of malicious object in jackson-databind7.5 Higheap7-apache-cxf-servicesRed HatPolymorphic deserialization of malicious object in jackson-databind7.5 Higheap7-apache-cxf-servicesRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticaleap7-apache-cxf-servicesRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticaleap7-apache-cxf-servicesRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticaleap7-apache-cxf-servicesRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticaleap7-apache-cxf-servicesRed HatHTTP Request Smuggling in Netty7.5 Higheap7-apache-cxf-servicesRed HatDenial of Service in Cryptacular7.5 Higheap7-apache-cxf-servicesRed HatUndertow vulnerable to Uncontrolled Resource Consumption7.5 Higheap7-apache-cxf-servicesRed HatA flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential...5.4 Mediumeap7-apache-cxf-servicesRed HatReflected Cross-Site Scripting in Apache CXF6.1 Mediumeap7-apache-cxf-servicesRed HatPrivate key leak in Apache CXF7.5 Higheap7-apache-cxf-servicesRed HatA flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests...7.5 Higheap7-apache-cxf-servicesRed HatImproper Restriction of XML External Entity Reference in jackson-mapper-asl5.9 Mediumeap7-apache-cxf-servicesRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 Mediumeap7-apache-cxf-servicesRed HatLoop with Unreachable Exit Condition in Apache Thrift7.5 Higheap7-apache-cxf-servicesRed HatOut-of-bounds read in Apache Thrift7.5 High- Show moreLoading…