eap7-hal-console vulnerabilities (Red Hat)
188 vulnerabilities.
eap7-hal-consoleRed HatApache MINA SSHD: Java unsafe deserialization vulnerability9.8 Criticaleap7-hal-consoleRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticaleap7-hal-consoleRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Higheap7-hal-consoleRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Higheap7-hal-consoleRed HatStack Buffer Overflow in Woodstox6.5 Mediumeap7-hal-consoleRed HatStack Buffer Overflow in Jettison6.5 Mediumeap7-hal-consoleRed HatStack Buffer Overflow in Jettison6.5 Mediumeap7-hal-consoleRed HatA flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response...7.5 Higheap7-hal-consoleRed HatDenial of Service (DoS)7.5 Higheap7-hal-consoleRed Hatjsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled6.1 Mediumeap7-hal-consoleRed HatXNIO `notifyReadClosed` method logging message to unexpected end7.5 Higheap7-hal-consoleRed Hatwildfly-core allows user with access to management interface to access vault expression, retrieve item from vault3.3 Loweap7-hal-consoleRed HatApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets7.5 Higheap7-hal-consoleRed HatUndertow vulnerable to memory exhaustion due to buffer leak7.5 Higheap7-hal-consoleRed Hatundertow Race Condition vulnerability5.9 Mediumeap7-hal-consoleRed HatThis is a concurrency issue that can result in the wrong caller principal being returned from the...5.3 Mediumeap7-hal-consoleRed HatLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumeap7-hal-consoleRed HatDeserialization of Untrusted Data7.7 Higheap7-hal-consoleRed HatPath Traversal in Moment.js7.5 Higheap7-hal-consoleRed HatPrototype Pollution in minimist9.8 Criticaleap7-hal-consoleRed HatA flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss...7.5 Higheap7-hal-consoleRed HatDeeply nested json in jackson-databind7.5 Higheap7-hal-consoleRed HatApache ActiveMQ Artemis DoS7.5 Higheap7-hal-consoleRed HatInfinite loop within Apache XercesJ xml parser6.5 Mediumeap7-hal-consoleRed HatVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...5.3 Mediumeap7-hal-consoleRed HatArbitrary code execution in H2 Console9.8 Criticaleap7-hal-consoleRed HatRCE in H2 Console9.8 Criticaleap7-hal-consoleRed HatApache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack9.0 Criticaleap7-hal-consoleRed HatApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints10.0 Criticaleap7-hal-consoleRed HatHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 Mediumeap7-hal-consoleRed HatCross-site Scripting (XSS)3.1 Loweap7-hal-consoleRed HatSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 Higheap7-hal-consoleRed HatBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 Higheap7-hal-consoleRed HatPrivilege Context Switching Error in wildlfy5.4 Mediumeap7-hal-consoleRed HatDirectory traversal in Eclipse Mojarra6.5 Mediumeap7-hal-consoleRed HatUncontrolled Resource Consumption in jboss-remoting5.9 Mediumeap7-hal-consoleRed HatUncontrolled Resource Consumption in XNIO5.9 Mediumeap7-hal-consoleRed HatPermissions bypass in SmallRye4.4 Mediumeap7-hal-consoleRed HatCross-site scripting in RESTEasy6.1 Mediumeap7-hal-consoleRed HatImproper Input Validation in Jakarta Expression Language5.3 Mediumeap7-hal-consoleRed HatCross-site Scripting in Wildfly4.8 Mediumeap7-hal-consoleRed HatJBoss EJB Client information disclosure vulnerability4.3 Mediumeap7-hal-consoleRed HatPossible limited path traversal vulnerabily in Apache Commons IO4.8 Mediumeap7-hal-consoleRed HatPossible request smuggling in HTTP/2 due missing validation of content-length5.9 Mediumeap7-hal-consoleRed HatVelocity Sandbox Bypass8.8 Higheap7-hal-consoleRed HatPossible request smuggling in HTTP/2 due missing validation5.9 Mediumeap7-hal-consoleRed HatDenial of service in Undertow7.5 Higheap7-hal-consoleRed HatHTTP request smuggling in Undertow4.8 Mediumeap7-hal-consoleRed HatLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 Mediumeap7-hal-consoleRed HatLogic error in Legion of the Bouncy Castle BC Java8.1 High- Show moreLoading…