eap7-apache-sshd vulnerabilities (Red Hat)

36 vulnerabilities.

• eap7-apache-sshd Red Hat Xnio: stackoverflowexception when the chain of notifier states becomes problematically big CVE-2023-5685 Fix available 7.5 HighMarch 22, 2024
• eap7-apache-sshd Red Hat Eap-galleon: custom provisioning creates unsecured http-invoker CVE-2023-4503 6.8 MediumFebruary 6, 2024
• eap7-apache-sshd Red Hat Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• eap7-apache-sshd Red Hat Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK CVE-2023-39410 Fix available 7.5 HighSeptember 29, 2023
• eap7-apache-sshd Red Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• eap7-apache-sshd Red Hat Apache MINA SSHD: Information disclosure bugs with RootedFilesystem CVE-2023-35887 Public exploitFix available 5.0 MediumJuly 10, 2023
• eap7-apache-sshd Red Hat Use of temporary directory for file creation in `FileBackedOutputStream` in Guava CVE-2023-2976 Fix available 5.5 MediumJune 14, 2023
• eap7-apache-sshd Red Hat Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty CVE-2023-26049 Public exploitFix available 2.4 LowApril 18, 2023
• eap7-apache-sshd Red Hat OutOfMemoryError for large multipart without filename in Eclipse Jetty CVE-2023-26048 Public exploitFix available 5.3 MediumApril 18, 2023
• eap7-apache-sshd Red Hat Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator CVE-2022-3143 Fix available 7.4 HighJanuary 11, 2023
• eap7-apache-sshd Red Hat Apache CXF SSRF Vulnerability CVE-2022-46364 Public exploitFix available 9.8 CriticalDecember 13, 2022
• eap7-apache-sshd Red Hat Jettison Out-of-bounds Write vulnerability CVE-2022-45693 Fix available 7.5 HighDecember 13, 2022
• eap7-apache-sshd Red Hat Apache MINA SSHD: Java unsafe deserialization vulnerability CVE-2022-45047 Public exploitFix available 9.8 CriticalNovember 16, 2022
• eap7-apache-sshd Red Hat Uncontrolled Resource Consumption in FasterXML jackson-databind CVE-2022-42004 Fix available 7.5 HighOctober 2, 2022
• eap7-apache-sshd Red Hat Uncontrolled Resource Consumption in Jackson-databind CVE-2022-42003 Fix available 7.5 HighOctober 2, 2022
• eap7-apache-sshd Red Hat Stack Buffer Overflow in Woodstox CVE-2022-40152 Fix available EPSS 18.2% 6.5 MediumSeptember 16, 2022
• eap7-apache-sshd Red Hat Stack Buffer Overflow in Jettison CVE-2022-40150 Fix available 6.5 MediumSeptember 16, 2022
• eap7-apache-sshd Red Hat Stack Buffer Overflow in Jettison CVE-2022-40149 Fix available 6.5 MediumSeptember 16, 2022
• eap7-apache-sshd Red Hat Undertow Uncontrolled Resource Consumption CVE-2021-3629 Fix available 5.9 MediumMay 24, 2022
• eap7-apache-sshd Red Hat Wildfly-Core user account mismanagement CVE-2021-3717 Fix available 7.8 HighMay 24, 2022
• eap7-apache-sshd Red Hat Local Information Disclosure Vulnerability in io.netty:netty-codec-http CVE-2022-24823 Fix available 5.5 MediumMay 6, 2022
• eap7-apache-sshd Red Hat Deserialization of Untrusted Data CVE-2022-25647 Fix available EPSS 12.2% 7.7 HighMay 1, 2022
• eap7-apache-sshd Red Hat Prototype Pollution in minimist CVE-2021-44906 Public exploitFix available 9.8 CriticalMarch 17, 2022
• eap7-apache-sshd Red Hat Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions CVE-2021-37714 Fix available 7.5 HighAugust 18, 2021
• eap7-apache-sshd Red Hat DoS/OOM leak vulnerability in Apache Mina SSHD Server CVE-2021-30129 Fix available 6.5 MediumJuly 12, 2021
• eap7-apache-sshd Red Hat Exposure of class information in RESTEasy CVE-2021-20289 Fix available 5.3 MediumMarch 26, 2021
• eap7-apache-sshd Red Hat Potential XSS vulnerability in jQuery CVE-2020-11023 In KEVPublic exploitFix available EPSS 84.9% 6.9 MediumApril 29, 2020
• eap7-apache-sshd Red Hat jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• eap7-apache-sshd Red Hat XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• eap7-apache-sshd Red Hat Bootstrap Vulnerable to Cross-Site Scripting CVE-2019-8331 Public exploitFix available EPSS 16.4% 6.1 MediumFebruary 20, 2019
• eap7-apache-sshd Red Hat Bootstrap Cross-site Scripting vulnerability CVE-2016-10735 Public exploitFix available 6.1 MediumJanuary 9, 2019
• eap7-apache-sshd Red Hat Bootstrap Cross-site Scripting vulnerability CVE-2018-14042 Public exploitFix available 6.1 MediumJuly 13, 2018
• eap7-apache-sshd Red Hat Bootstrap Cross-site Scripting vulnerability CVE-2018-14041 Public exploitFix available 6.1 MediumJuly 13, 2018
• eap7-apache-sshd Red Hat Bootstrap vulnerable to Cross-Site Scripting (XSS) CVE-2018-14040 Public exploitFix available 6.1 MediumJuly 13, 2018
• eap7-apache-sshd Red Hat Regular Expression Denial of Service in moment CVE-2017-18214 Fix available 7.5 HighMarch 4, 2018
• eap7-apache-sshd Red Hat Cross-Site Scripting (XSS) in jquery CVE-2015-9251 Public exploitFix available EPSS 29.7% 6.1 MediumJanuary 18, 2018