eap7-apache-cxf vulnerabilities (Red Hat)
162 vulnerabilities.
eap7-apache-cxfRed HatLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumeap7-apache-cxfRed HatDeserialization of Untrusted Data7.7 Higheap7-apache-cxfRed HatPrototype Pollution in minimist9.8 Criticaleap7-apache-cxfRed HatArbitrary code execution in H2 Console9.8 Criticaleap7-apache-cxfRed HatA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.8.8 Higheap7-apache-cxfRed HatSQL injection in JDBC Appender in Apache Log4j V19.8 Criticaleap7-apache-cxfRed HatApache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack9.0 Criticaleap7-apache-cxfRed HatDeserialization of untrusted data in JMSAppender in Apache Log4j 1.27.5 Higheap7-apache-cxfRed HatApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints10.0 Criticaleap7-apache-cxfRed HatCross-site Scripting (XSS)3.1 Loweap7-apache-cxfRed HatBypass of the secureValidation property7.5 Higheap7-apache-cxfRed HatCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions7.5 Higheap7-apache-cxfRed HatObservable Discrepancy in Wildfly Elytron5.3 Mediumeap7-apache-cxfRed HatPrivilege Context Switching Error in wildlfy5.4 Mediumeap7-apache-cxfRed HatDirectory traversal in Eclipse Mojarra6.5 Mediumeap7-apache-cxfRed HatUncontrolled Resource Consumption in XNIO5.9 Mediumeap7-apache-cxfRed HatPermissions bypass in SmallRye4.4 Mediumeap7-apache-cxfRed HatCross-site scripting in RESTEasy6.1 Mediumeap7-apache-cxfRed HatExposure of class information in RESTEasy5.3 Mediumeap7-apache-cxfRed HatVelocity Sandbox Bypass8.8 Higheap7-apache-cxfRed HatLogic error in Legion of the Bouncy Castle BC Java8.1 Higheap7-apache-cxfRed HatA flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy...6.5 Mediumeap7-apache-cxfRed HatImproper Input Validation in Xerces5.3 Mediumeap7-apache-cxfRed HatAllocation of Resources Without Limits or Throttling in Undertow7.5 Higheap7-apache-cxfRed HatHTTP Request Smuggling in Undertow6.5 Mediumeap7-apache-cxfRed HatImproper Input Validation in RESTEasy7.5 Higheap7-apache-cxfRed HatA flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently...4.2 Mediumeap7-apache-cxfRed HatImproper Authorization in Undertoe8.6 Higheap7-apache-cxfRed HatImproper Input Validation in Undertow8.1 Higheap7-apache-cxfRed HatApache CXF JMX Integration is vulnerable to a MITM attack5.3 Mediumeap7-apache-cxfRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Higheap7-apache-cxfRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing8.8 Higheap7-apache-cxfRed HatInadequate Encryption Strength and Algorithm Downgrade in Wildfly7.4 Higheap7-apache-cxfRed HatPolymorphic deserialization of malicious object in jackson-databind7.5 Higheap7-apache-cxfRed HatPolymorphic deserialization of malicious object in jackson-databind7.5 Higheap7-apache-cxfRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticaleap7-apache-cxfRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticaleap7-apache-cxfRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticaleap7-apache-cxfRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticaleap7-apache-cxfRed HatHTTP Request Smuggling in Netty7.5 Higheap7-apache-cxfRed HatDenial of Service in Cryptacular7.5 Higheap7-apache-cxfRed HatUndertow vulnerable to Uncontrolled Resource Consumption7.5 Higheap7-apache-cxfRed HatA flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential...5.4 Mediumeap7-apache-cxfRed HatReflected Cross-Site Scripting in Apache CXF6.1 Mediumeap7-apache-cxfRed HatPrivate key leak in Apache CXF7.5 Higheap7-apache-cxfRed HatA flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests...7.5 Higheap7-apache-cxfRed HatImproper Restriction of XML External Entity Reference in jackson-mapper-asl5.9 Mediumeap7-apache-cxfRed HatThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks6.5 Mediumeap7-apache-cxfRed HatLoop with Unreachable Exit Condition in Apache Thrift7.5 Higheap7-apache-cxfRed HatOut-of-bounds read in Apache Thrift7.5 High- Show moreLoading…