eap7-jackson-core vulnerabilities (Red Hat)
185 vulnerabilities.
eap7-jackson-coreRed HatNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Loweap7-jackson-coreRed HatNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Mediumeap7-jackson-coreRed HatNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 Higheap7-jackson-coreRed HatUndertow: outofmemoryerror due to @multipartconfig handling7.5 Higheap7-jackson-coreRed HatUndertow: infinite loop in sslconduit during close7.5 Higheap7-jackson-coreRed HatUndertow client not checking server identity presented by server certificate in https connections7.5 Higheap7-jackson-coreRed HatWildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator7.4 Higheap7-jackson-coreRed HatApache CXF SSRF Vulnerability9.8 Criticaleap7-jackson-coreRed HatApache CXF directory listing / code exfiltration7.5 Higheap7-jackson-coreRed HatJettison Out-of-bounds Write vulnerability7.5 Higheap7-jackson-coreRed HatHAProxyMessageDecoder Stack Exhaustion DoS5.3 Mediumeap7-jackson-coreRed HatRemote Code execution in SnakeYAML8.3 Higheap7-jackson-coreRed HatApache MINA SSHD: Java unsafe deserialization vulnerability9.8 Criticaleap7-jackson-coreRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticaleap7-jackson-coreRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Higheap7-jackson-coreRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Higheap7-jackson-coreRed HatStack Buffer Overflow in Woodstox6.5 Mediumeap7-jackson-coreRed HatStack Buffer Overflow in Jettison6.5 Mediumeap7-jackson-coreRed HatStack Buffer Overflow in Jettison6.5 Mediumeap7-jackson-coreRed HatA flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response...7.5 Higheap7-jackson-coreRed HatA flaw was found in Undertow. A potential security issue in flow control handling by the browser...7.5 Higheap7-jackson-coreRed HatUndertow vulnerable to Dos via Large AJP request7.5 Higheap7-jackson-coreRed HatLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumeap7-jackson-coreRed HatDeserialization of Untrusted Data7.7 Higheap7-jackson-coreRed HatPrototype Pollution in minimist9.8 Criticaleap7-jackson-coreRed HatDeeply nested json in jackson-databind7.5 Higheap7-jackson-coreRed HatRCE in H2 Console9.8 Criticaleap7-jackson-coreRed HatApache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack9.0 Criticaleap7-jackson-coreRed HatApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints10.0 Criticaleap7-jackson-coreRed HatSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 Higheap7-jackson-coreRed HatBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 Higheap7-jackson-coreRed HatPrivilege Context Switching Error in wildlfy5.4 Mediumeap7-jackson-coreRed HatDirectory traversal in Eclipse Mojarra6.5 Mediumeap7-jackson-coreRed HatPermissions bypass in SmallRye4.4 Mediumeap7-jackson-coreRed HatCross-site scripting in RESTEasy6.1 Mediumeap7-jackson-coreRed HatVelocity Sandbox Bypass8.8 Higheap7-jackson-coreRed HatSQL injection in hibernate-core7.4 Higheap7-jackson-coreRed HatXML External Entity (XXE) Injection in Jackson Databind7.5 Higheap7-jackson-coreRed HatWildfly-OpenSSL memory leak flaw7.5 Higheap7-jackson-coreRed HatHTTP Request Smuggling in Undertow4.8 Mediumeap7-jackson-coreRed HatSession Fixation in WildFly Elytron7.5 Higheap7-jackson-coreRed HatA flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed...7.5 Higheap7-jackson-coreRed HatIncorrect Authorization in WildFly Elytron7.5 Higheap7-jackson-coreRed HatThe issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to...5.3 Mediumeap7-jackson-coreRed HatWildfly EJB Client causes DoS6.5 Mediumeap7-jackson-coreRed HatA vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat...6.5 Mediumeap7-jackson-coreRed HatSQL Injection in Hibernate ORM6.5 Mediumeap7-jackson-coreRed HatWildfly Unsafe Deserialization Vulnerability6.6 Mediumeap7-jackson-coreRed HatAllocation of Resources Without Limits or Throttling in Undertow7.5 Higheap7-jackson-coreRed HatHTTP Request Smuggling in Undertow6.5 Medium- Show moreLoading…