eap7-eclipse-jgit vulnerabilities (Red Hat)

20 vulnerabilities.

• eap7-eclipse-jgit Red Hat Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection CVE-2026-0603 Public exploitFix available 8.3 HighJanuary 23, 2026
• eap7-eclipse-jgit Red Hat Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf CVE-2025-12543 Fix available 9.6 CriticalJanuary 7, 2026
• eap7-eclipse-jgit Red Hat Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded CVE-2024-3884 Fix available 7.5 HighDecember 3, 2025
• eap7-eclipse-jgit Red Hat Undertow: undertow madeyoureset http/2 ddos vulnerability CVE-2025-9784 Public exploitFix available 7.5 HighSeptember 2, 2025
• eap7-eclipse-jgit Red Hat Apache CXF: Untrusted JMS configuration can lead to RCE CVE-2025-48913 Fix available 9.8 CriticalAugust 8, 2025
• eap7-eclipse-jgit Red Hat jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data CVE-2025-52999 Public exploitFix available 8.7 HighJune 25, 2025
• eap7-eclipse-jgit Red Hat XXE vulnerability in Eclipse JGit CVE-2025-4949 Fix available 6.8 MediumMay 21, 2025
• eap7-eclipse-jgit Red Hat Undertow: cookie smuggling/spoofing CVE-2023-4639 Fix available 7.4 HighSeptember 27, 2024
• eap7-eclipse-jgit Red Hat Undertow: unrestricted request storage leads to memory exhaustion CVE-2023-1973 Fix available 7.5 HighSeptember 27, 2024
• eap7-eclipse-jgit Red Hat Stack overflow in Protocol Buffers Java Lite CVE-2024-7254 Fix available 8.7 HighSeptember 19, 2024
• eap7-eclipse-jgit Red Hat Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol CVE-2024-1635 Fix available 7.5 HighFebruary 19, 2024
• eap7-eclipse-jgit Red Hat Undertow: directory traversal vulnerability CVE-2024-1459 Fix available 5.3 MediumFebruary 12, 2024
• eap7-eclipse-jgit Red Hat Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin CVE-2023-48795 Public exploitFix available EPSS 93.5% 5.9 MediumDecember 18, 2023
• eap7-eclipse-jgit Red Hat Apache Santuario: Private Key disclosure in debug-log output CVE-2023-44483 Fix available 6.5 MediumOctober 20, 2023
• eap7-eclipse-jgit Red Hat Netty MadeYouReset HTTP/2 DDoS Vulnerability CVE-2025-55163 Public exploitFix available 8.2 HighOctober 10, 2023
• eap7-eclipse-jgit Red Hat Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write CVE-2023-4759 Fix available 8.8 HighSeptember 12, 2023
• eap7-eclipse-jgit Red Hat Local Information Disclosure Vulnerability in io.netty:netty-codec-http CVE-2022-24823 Fix available 5.5 MediumMay 6, 2022
• eap7-eclipse-jgit Red Hat Deserialization of Untrusted Data CVE-2022-25647 Fix available EPSS 12.2% 7.7 HighMay 1, 2022
• eap7-eclipse-jgit Red Hat Prototype Pollution in minimist CVE-2021-44906 Public exploitFix available 9.8 CriticalMarch 17, 2022
• eap7-eclipse-jgit Red Hat keycloak-core discloses system properties CVE-2017-2582 Fix available 6.5 MediumJuly 26, 2018