eap7-jackson-modules-base vulnerabilities (Red Hat)
159 vulnerabilities.
eap7-jackson-modules-baseRed HatNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Loweap7-jackson-modules-baseRed HatNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Mediumeap7-jackson-modules-baseRed HatNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 Higheap7-jackson-modules-baseRed HatUndertow: outofmemoryerror due to @multipartconfig handling7.5 Higheap7-jackson-modules-baseRed HatUndertow: infinite loop in sslconduit during close7.5 Higheap7-jackson-modules-baseRed HatUndertow client not checking server identity presented by server certificate in https connections7.5 Higheap7-jackson-modules-baseRed HatWildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator7.4 Higheap7-jackson-modules-baseRed HatApache CXF SSRF Vulnerability9.8 Criticaleap7-jackson-modules-baseRed HatApache CXF directory listing / code exfiltration7.5 Higheap7-jackson-modules-baseRed HatJettison Out-of-bounds Write vulnerability7.5 Higheap7-jackson-modules-baseRed HatHAProxyMessageDecoder Stack Exhaustion DoS5.3 Mediumeap7-jackson-modules-baseRed HatRemote Code execution in SnakeYAML8.3 Higheap7-jackson-modules-baseRed HatApache MINA SSHD: Java unsafe deserialization vulnerability9.8 Criticaleap7-jackson-modules-baseRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticaleap7-jackson-modules-baseRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Higheap7-jackson-modules-baseRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Higheap7-jackson-modules-baseRed HatStack Buffer Overflow in Woodstox6.5 Mediumeap7-jackson-modules-baseRed HatStack Buffer Overflow in Jettison6.5 Mediumeap7-jackson-modules-baseRed HatStack Buffer Overflow in Jettison6.5 Mediumeap7-jackson-modules-baseRed HatA flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response...7.5 Higheap7-jackson-modules-baseRed HatA flaw was found in Undertow. A potential security issue in flow control handling by the browser...7.5 Higheap7-jackson-modules-baseRed HatUndertow vulnerable to Dos via Large AJP request7.5 Higheap7-jackson-modules-baseRed HatLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumeap7-jackson-modules-baseRed HatDeserialization of Untrusted Data7.7 Higheap7-jackson-modules-baseRed HatPrototype Pollution in minimist9.8 Criticaleap7-jackson-modules-baseRed HatDeeply nested json in jackson-databind7.5 Higheap7-jackson-modules-baseRed HatRCE in H2 Console9.8 Criticaleap7-jackson-modules-baseRed HatApache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack9.0 Criticaleap7-jackson-modules-baseRed HatApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints10.0 Criticaleap7-jackson-modules-baseRed HatSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 Higheap7-jackson-modules-baseRed HatBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 Higheap7-jackson-modules-baseRed HatPrivilege Context Switching Error in wildlfy5.4 Mediumeap7-jackson-modules-baseRed HatDirectory traversal in Eclipse Mojarra6.5 Mediumeap7-jackson-modules-baseRed HatPermissions bypass in SmallRye4.4 Mediumeap7-jackson-modules-baseRed HatCross-site scripting in RESTEasy6.1 Mediumeap7-jackson-modules-baseRed HatVelocity Sandbox Bypass8.8 Higheap7-jackson-modules-baseRed HatSQL injection in hibernate-core7.4 Higheap7-jackson-modules-baseRed HatXML External Entity (XXE) Injection in Jackson Databind7.5 Higheap7-jackson-modules-baseRed HatWildfly-OpenSSL memory leak flaw7.5 Higheap7-jackson-modules-baseRed HatHTTP Request Smuggling in Undertow4.8 Mediumeap7-jackson-modules-baseRed HatSession Fixation in WildFly Elytron7.5 Higheap7-jackson-modules-baseRed HatA flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed...7.5 Higheap7-jackson-modules-baseRed HatIncorrect Authorization in WildFly Elytron7.5 Higheap7-jackson-modules-baseRed HatThe issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to...5.3 Mediumeap7-jackson-modules-baseRed HatWildfly EJB Client causes DoS6.5 Mediumeap7-jackson-modules-baseRed HatA vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat...6.5 Mediumeap7-jackson-modules-baseRed HatSQL Injection in Hibernate ORM6.5 Mediumeap7-jackson-modules-baseRed HatWildfly Unsafe Deserialization Vulnerability6.6 Mediumeap7-jackson-modules-baseRed HatAllocation of Resources Without Limits or Throttling in Undertow7.5 Higheap7-jackson-modules-baseRed HatHTTP Request Smuggling in Undertow6.5 Medium- Show moreLoading…