eap7-h2database vulnerabilities (Red Hat)
50 vulnerabilities.
-
eap7-h2databaseRed Hat Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK) 9.2 Critical -
eap7-h2databaseRed Hat Xnio: stackoverflowexception when the chain of notifier states becomes problematically big 7.5 High -
eap7-h2databaseRed Hat Apache CXF SSRF Vulnerability using the Aegis databinding 9.3 Critical -
eap7-h2databaseRed Hat Eap-7: heap exhaustion via deserialization 7.5 High -
eap7-h2databaseRed Hat Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 7.5 High -
eap7-h2databaseRed Hat Apache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender 7.5 High -
eap7-h2databaseRed Hat Apache CXF SSRF Vulnerability 9.8 Critical -
eap7-h2databaseRed Hat Remote code execution in HyperSQL DataBase 8.0 High -
eap7-h2databaseRed Hat A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response... 7.5 High -
eap7-h2databaseRed Hat XNIO `notifyReadClosed` method logging message to unexpected end 7.5 High -
eap7-h2databaseRed Hat Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets 7.5 High -
eap7-h2databaseRed Hat Undertow vulnerable to Denial of Service (DoS) attacks 7.5 High -
eap7-h2databaseRed Hat This is a concurrency issue that can result in the wrong caller principal being returned from the... 5.3 Medium -
eap7-h2databaseRed Hat Local Information Disclosure Vulnerability in io.netty:netty-codec-http 5.5 Medium -
eap7-h2databaseRed Hat Deserialization of Untrusted Data 7.7 High -
eap7-h2databaseRed Hat Path Traversal in Moment.js 7.5 High -
eap7-h2databaseRed Hat Prototype Pollution in minimist 9.8 Critical -
eap7-h2databaseRed Hat A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss... 7.5 High -
eap7-h2databaseRed Hat Deeply nested json in jackson-databind 7.5 High -
eap7-h2databaseRed Hat Apache ActiveMQ Artemis DoS 7.5 High -
eap7-h2databaseRed Hat Infinite loop within Apache XercesJ xml parser 6.5 Medium -
eap7-h2databaseRed Hat Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... 5.3 Medium -
eap7-h2databaseRed Hat Arbitrary code execution in H2 Console 9.8 Critical -
eap7-h2databaseRed Hat A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. 8.8 High -
eap7-h2databaseRed Hat SQL injection in JDBC Appender in Apache Log4j V1 9.8 Critical -
eap7-h2databaseRed Hat RCE in H2 Console 9.8 Critical -
eap7-h2databaseRed Hat Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 7.5 High -
eap7-h2databaseRed Hat HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling 6.5 Medium -
eap7-h2databaseRed Hat SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way 7.5 High -
eap7-h2databaseRed Hat Bzip2Decoder doesn't allow setting size restrictions for decompressed data 7.5 High -
eap7-h2databaseRed Hat Logic error in Legion of the Bouncy Castle BC Java 8.1 High -
eap7-h2databaseRed Hat HTTP Request Smuggling in Netty 7.5 High -
eap7-h2databaseRed Hat An information disclosure vulnerability was found in JBoss Enterprise Application Platform before... 3.5 Low -
eap7-h2databaseRed Hat It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows... 7.7 High -
eap7-h2databaseRed Hat Undertow Request Smuggling vulnerability 2.6 Low -
eap7-h2databaseRed Hat keycloak-core discloses system properties 6.5 Medium -
eap7-h2databaseRed Hat It was found in EAP 7 before 7.0.9 that properties based files of the management and the... 5.5 Medium -
eap7-h2databaseRed Hat Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in... 7.0 High -
eap7-h2databaseRed Hat admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download... 4.3 Medium -
eap7-h2databaseRed Hat Red Hat Wildfly DoS 7.5 High -
eap7-h2databaseRed Hat Undertow vulnerable to Request Smuggling 6.1 Medium -
eap7-h2databaseRed Hat Privilege Escalation in Hibernate Validator 7.0 High -
eap7-h2databaseRed Hat Get requests in JBoss Enterprise Application Platform (EAP) 7 disclose internal IP addresses to... 5.3 Medium -
eap7-h2databaseRed Hat jackson-databind is vulnerable to a deserialization flaw 9.8 Critical -
eap7-h2databaseRed Hat Moderate severity vulnerability that affects io.undertow:undertow-core 7.5 High -
eap7-h2databaseRed Hat Undertow-core vulnerable to HTTP Request Smuggling 6.5 Medium -
eap7-h2databaseRed Hat Undertow Uncaught Exception vulnerability 5.9 Medium -
eap7-h2databaseRed Hat Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain 7.2 High -
eap7-h2databaseRed Hat The domain controller in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2... 8.8 High -
eap7-h2databaseRed Hat Improper Neutralization of CRLF Sequences in Wildfly Undertow 6.1 Medium