eap7-avro vulnerabilities (Red Hat)

26 vulnerabilities.

• eap7-avro Red Hat Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK) CVE-2024-47561 Fix available 9.2 CriticalOctober 3, 2024
• eap7-avro Red Hat Xnio: stackoverflowexception when the chain of notifier states becomes problematically big CVE-2023-5685 Fix available 7.5 HighMarch 22, 2024
• eap7-avro Red Hat Apache CXF SSRF Vulnerability using the Aegis databinding CVE-2024-28752 Public exploitFix available 9.3 CriticalMarch 15, 2024
• eap7-avro Red Hat Eap-galleon: custom provisioning creates unsecured http-invoker CVE-2023-4503 6.8 MediumFebruary 6, 2024
• eap7-avro Red Hat Eap-7: heap exhaustion via deserialization CVE-2023-3171 7.5 HighDecember 27, 2023
• eap7-avro Red Hat Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK CVE-2023-39410 Fix available 7.5 HighSeptember 29, 2023
• eap7-avro Red Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• eap7-avro Red Hat Apache MINA SSHD: Information disclosure bugs with RootedFilesystem CVE-2023-35887 Public exploitFix available 5.0 MediumJuly 10, 2023
• eap7-avro Red Hat Use of temporary directory for file creation in `FileBackedOutputStream` in Guava CVE-2023-2976 Fix available 5.5 MediumJune 14, 2023
• eap7-avro Red Hat Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty CVE-2023-26049 Public exploitFix available 2.4 LowApril 18, 2023
• eap7-avro Red Hat OutOfMemoryError for large multipart without filename in Eclipse Jetty CVE-2023-26048 Public exploitFix available 5.3 MediumApril 18, 2023
• eap7-avro Red Hat Apache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender CVE-2023-26464 Fix available 7.5 HighMarch 10, 2023
• eap7-avro Red Hat Apache CXF SSRF Vulnerability CVE-2022-46364 Public exploitFix available 9.8 CriticalDecember 13, 2022
• eap7-avro Red Hat Remote code execution in HyperSQL DataBase CVE-2022-41853 Public exploitFix available 8.0 HighOctober 6, 2022
• eap7-avro Red Hat Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets CVE-2022-34169 Public exploitFix available EPSS 81.8% 7.5 HighJuly 19, 2022
• eap7-avro Red Hat Undertow vulnerable to Denial of Service (DoS) attacks CVE-2021-3859 Fix available 7.5 HighJuly 15, 2022
• eap7-avro Red Hat Local Information Disclosure Vulnerability in io.netty:netty-codec-http CVE-2022-24823 Fix available 5.5 MediumMay 6, 2022
• eap7-avro Red Hat Deserialization of Untrusted Data CVE-2022-25647 Fix available EPSS 12.2% 7.7 HighMay 1, 2022
• eap7-avro Red Hat Prototype Pollution in minimist CVE-2021-44906 Public exploitFix available 9.8 CriticalMarch 17, 2022
• eap7-avro Red Hat Arbitrary code execution in H2 Console CVE-2022-23221 Public exploitFix available EPSS 64.8% 9.8 CriticalJanuary 19, 2022
• eap7-avro Red Hat A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• eap7-avro Red Hat SQL injection in JDBC Appender in Apache Log4j V1 CVE-2022-23305 Public exploitFix available EPSS 66.5% 9.8 CriticalJanuary 18, 2022
• eap7-avro Red Hat Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• eap7-avro Red Hat Logic error in Legion of the Bouncy Castle BC Java CVE-2020-28052 Public exploitFix available 8.1 HighDecember 18, 2020
• eap7-avro Red Hat HTTP Request Smuggling in Netty CVE-2020-7238 Fix available 7.5 HighJanuary 27, 2020
• eap7-avro Red Hat keycloak-core discloses system properties CVE-2017-2582 Fix available 6.5 MediumJuly 26, 2018