eap7-apache-cxf-tools vulnerabilities (Red Hat)
162 vulnerabilities.
eap7-apache-cxf-toolsRed HatLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumeap7-apache-cxf-toolsRed HatDeserialization of Untrusted Data7.7 Higheap7-apache-cxf-toolsRed HatPrototype Pollution in minimist9.8 Criticaleap7-apache-cxf-toolsRed HatArbitrary code execution in H2 Console9.8 Criticaleap7-apache-cxf-toolsRed HatA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.8.8 Higheap7-apache-cxf-toolsRed HatSQL injection in JDBC Appender in Apache Log4j V19.8 Criticaleap7-apache-cxf-toolsRed HatApache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack9.0 Criticaleap7-apache-cxf-toolsRed HatDeserialization of untrusted data in JMSAppender in Apache Log4j 1.27.5 Higheap7-apache-cxf-toolsRed HatApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints10.0 Criticaleap7-apache-cxf-toolsRed HatCross-site Scripting (XSS)3.1 Loweap7-apache-cxf-toolsRed HatBypass of the secureValidation property7.5 Higheap7-apache-cxf-toolsRed HatCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions7.5 Higheap7-apache-cxf-toolsRed HatObservable Discrepancy in Wildfly Elytron5.3 Mediumeap7-apache-cxf-toolsRed HatPrivilege Context Switching Error in wildlfy5.4 Mediumeap7-apache-cxf-toolsRed HatDirectory traversal in Eclipse Mojarra6.5 Mediumeap7-apache-cxf-toolsRed HatUncontrolled Resource Consumption in XNIO5.9 Mediumeap7-apache-cxf-toolsRed HatPermissions bypass in SmallRye4.4 Mediumeap7-apache-cxf-toolsRed HatCross-site scripting in RESTEasy6.1 Mediumeap7-apache-cxf-toolsRed HatExposure of class information in RESTEasy5.3 Mediumeap7-apache-cxf-toolsRed HatVelocity Sandbox Bypass8.8 Higheap7-apache-cxf-toolsRed HatLogic error in Legion of the Bouncy Castle BC Java8.1 Higheap7-apache-cxf-toolsRed HatA flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy...6.5 Mediumeap7-apache-cxf-toolsRed HatImproper Input Validation in Xerces5.3 Mediumeap7-apache-cxf-toolsRed HatAllocation of Resources Without Limits or Throttling in Undertow7.5 Higheap7-apache-cxf-toolsRed HatHTTP Request Smuggling in Undertow6.5 Mediumeap7-apache-cxf-toolsRed HatImproper Input Validation in RESTEasy7.5 Higheap7-apache-cxf-toolsRed HatA flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently...4.2 Mediumeap7-apache-cxf-toolsRed HatImproper Authorization in Undertoe8.6 Higheap7-apache-cxf-toolsRed HatImproper Input Validation in Undertow8.1 Higheap7-apache-cxf-toolsRed HatApache CXF JMX Integration is vulnerable to a MITM attack5.3 Mediumeap7-apache-cxf-toolsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Higheap7-apache-cxf-toolsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Higheap7-apache-cxf-toolsRed HatInadequate Encryption Strength and Algorithm Downgrade in Wildfly7.4 Higheap7-apache-cxf-toolsRed HatPolymorphic deserialization of malicious object in jackson-databind7.5 Higheap7-apache-cxf-toolsRed HatPolymorphic deserialization of malicious object in jackson-databind7.5 Higheap7-apache-cxf-toolsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticaleap7-apache-cxf-toolsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticaleap7-apache-cxf-toolsRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticaleap7-apache-cxf-toolsRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticaleap7-apache-cxf-toolsRed HatHTTP Request Smuggling in Netty7.5 Higheap7-apache-cxf-toolsRed HatDenial of Service in Cryptacular7.5 Higheap7-apache-cxf-toolsRed HatUndertow vulnerable to Uncontrolled Resource Consumption7.5 Higheap7-apache-cxf-toolsRed HatA flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential...5.4 Mediumeap7-apache-cxf-toolsRed HatReflected Cross-Site Scripting in Apache CXF6.1 Mediumeap7-apache-cxf-toolsRed HatPrivate key leak in Apache CXF7.5 Higheap7-apache-cxf-toolsRed HatA flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests...7.5 Higheap7-apache-cxf-toolsRed HatImproper Restriction of XML External Entity Reference in jackson-mapper-asl5.9 Mediumeap7-apache-cxf-toolsRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 Mediumeap7-apache-cxf-toolsRed HatLoop with Unreachable Exit Condition in Apache Thrift7.5 Higheap7-apache-cxf-toolsRed HatOut-of-bounds read in Apache Thrift7.5 High- Show moreLoading…