eap7-hal-console vulnerabilities (Red Hat)
188 vulnerabilities.
-
eap7-hal-consoleRed Hat hibernate-validator insecure default Expression Language interpolation 6.9 Medium -
eap7-hal-consoleRed Hat Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 8.8 High -
eap7-hal-consoleRed Hat Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution 6.2 Medium -
eap7-hal-consoleRed Hat HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store 4.6 Medium -
eap7-hal-consoleRed Hat Apache CXF: Denial of Service vulnerability with temporary files 5.9 Medium -
eap7-hal-consoleRed Hat Org.jboss.hal:hal-console: wildfly hal console cross-site scripting 6.5 Medium -
eap7-hal-consoleRed Hat hornetq vulnerable to file overwrite, sensitive information disclosure 7.1 High -
eap7-hal-consoleRed Hat Wildfly: wildfly vulnerable to cross-site scripting (xss) 6.1 Medium -
eap7-hal-consoleRed Hat Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader 4.3 Medium -
eap7-hal-consoleRed Hat Undertow: cookie smuggling/spoofing 7.4 High -
eap7-hal-consoleRed Hat Undertow: unrestricted request storage leads to memory exhaustion 7.5 High -
eap7-hal-consoleRed Hat Undertow: learningpushhandler can lead to remote memory dos attacks 5.3 Medium -
eap7-hal-consoleRed Hat Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket 7.5 High -
eap7-hal-consoleRed Hat Memory Exhaustion in braces 7.5 High -
eap7-hal-consoleRed Hat Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. 7.5 High -
eap7-hal-consoleRed Hat Bouncy Castle crafted signature and public key can be used to trigger an infinite loop 7.5 High -
eap7-hal-consoleRed Hat Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") 5.9 Medium -
eap7-hal-consoleRed Hat Wildfly: no timeout for eap management interface may lead to denial of service (dos) 4.1 Medium -
eap7-hal-consoleRed Hat Eap: wildfly-elytron has a ssrf security issue 7.3 High -
eap7-hal-consoleRed Hat Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames 7.5 High -
eap7-hal-consoleRed Hat Xnio: stackoverflowexception when the chain of notifier states becomes problematically big 7.5 High -
eap7-hal-consoleRed Hat Apache CXF SSRF Vulnerability using the Aegis databinding 9.3 Critical -
eap7-hal-consoleRed Hat Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol 7.5 High -
eap7-hal-consoleRed Hat Undertow: directory traversal vulnerability 5.3 Medium -
eap7-hal-consoleRed Hat Eap-galleon: custom provisioning creates unsecured http-invoker 6.8 Medium -
eap7-hal-consoleRed Hat Eap-7: heap exhaustion via deserialization 7.5 High -
eap7-hal-consoleRed Hat jose4j denial of service via specifically crafted JWE 6.5 Medium -
eap7-hal-consoleRed Hat Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
eap7-hal-consoleRed Hat Wildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actor 6.5 Medium -
eap7-hal-consoleRed Hat Denial of Service attack on windows app using Netty 5.5 Medium -
eap7-hal-consoleRed Hat SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine 7.5 High -
eap7-hal-consoleRed Hat Denial of Service attack on windows app using Netty 5.5 Medium -
eap7-hal-consoleRed Hat Netty HttpPostRequestDecoder can OOM 5.3 Medium -
eap7-hal-consoleRed Hat Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK 7.5 High -
eap7-hal-consoleRed Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
eap7-hal-consoleRed Hat Apache MINA SSHD: Information disclosure bugs with RootedFilesystem 5.0 Medium -
eap7-hal-consoleRed Hat Bouncy Castle For Java LDAP injection vulnerability 5.3 Medium -
eap7-hal-consoleRed Hat tough-cookie Prototype Pollution vulnerability 6.5 Medium -
eap7-hal-consoleRed Hat semver vulnerable to Regular Expression Denial of Service 5.3 Medium -
eap7-hal-consoleRed Hat netty-handler SniHandler 16MB allocation 6.5 Medium -
eap7-hal-consoleRed Hat Use of temporary directory for file creation in `FileBackedOutputStream` in Guava 5.5 Medium -
eap7-hal-consoleRed Hat Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty 2.4 Low -
eap7-hal-consoleRed Hat OutOfMemoryError for large multipart without filename in Eclipse Jetty 5.3 Medium -
eap7-hal-consoleRed Hat Apache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender 7.5 High -
eap7-hal-consoleRed Hat Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator 7.4 High -
eap7-hal-consoleRed Hat Apache CXF SSRF Vulnerability 9.8 Critical -
eap7-hal-consoleRed Hat Apache CXF directory listing / code exfiltration 7.5 High -
eap7-hal-consoleRed Hat Jettison Out-of-bounds Write vulnerability 7.5 High -
eap7-hal-consoleRed Hat HAProxyMessageDecoder Stack Exhaustion DoS 5.3 Medium -
eap7-hal-consoleRed Hat Remote Code execution in SnakeYAML 8.3 High - Show olderLoading…