eap7-jboss-server-migration-cli vulnerabilities (Red Hat)
294 vulnerabilities.
-
eap7-jboss-server-migration-cliRed Hat Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by default 8.8 High -
eap7-jboss-server-migration-cliRed Hat Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener 7.5 High -
eap7-jboss-server-migration-cliRed Hat Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method 7.5 High -
eap7-jboss-server-migration-cliRed Hat Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos 7.4 High -
eap7-jboss-server-migration-cliRed Hat Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service 7.5 High -
eap7-jboss-server-migration-cliRed Hat Undertow-core: oom via missing limits in chunked trailer in eap's undertow 7.5 High -
eap7-jboss-server-migration-cliRed Hat Openjdk-orb: unauthed class loading via iiop in eap 8.1 High -
eap7-jboss-server-migration-cliRed Hat Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions 8.1 High -
eap7-jboss-server-migration-cliRed Hat Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller 8.8 High -
eap7-jboss-server-migration-cliRed Hat Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery 7.4 High -
eap7-jboss-server-migration-cliRed Hat Picketlink-federation: auth bypass in picketlink saml unsolicited-response 9.8 Critical -
eap7-jboss-server-migration-cliRed Hat In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not... 7.5 High -
eap7-jboss-server-migration-cliRed Hat jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq) 8.7 High -
eap7-jboss-server-migration-cliRed Hat jackson-databind: Deeply nested JsonNode throws StackOverflowError for toString() 6.3 Medium -
eap7-jboss-server-migration-cliRed Hat jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation 8.1 High -
eap7-jboss-server-migration-cliRed Hat Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion. 8.7 High -
eap7-jboss-server-migration-cliRed Hat PKIX draft CompositeVerifier accepts empty signature sequence as valid. 6.3 Medium -
eap7-jboss-server-migration-cliRed Hat Non-constant time comparisons risk private key leakage in FrodoKEM. 8.9 High -
eap7-jboss-server-migration-cliRed Hat LDAP Injection Vulnerability in LDAPStoreHelper.java 5.5 Medium -
eap7-jboss-server-migration-cliRed Hat GOSTCTR implementation unable to process more than 255 blocks correctly 9.3 Critical -
eap7-jboss-server-migration-cliRed Hat Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation 9.3 Critical -
eap7-jboss-server-migration-cliRed Hat c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property 8.9 High -
eap7-jboss-server-migration-cliRed Hat mchange-commons-java: Remote Code Execution via JNDI Reference Resolution 8.9 High -
eap7-jboss-server-migration-cliRed Hat jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data 8.7 High -
eap7-jboss-server-migration-cliRed Hat hibernate-validator insecure default Expression Language interpolation 6.9 Medium -
eap7-jboss-server-migration-cliRed Hat Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 8.8 High -
eap7-jboss-server-migration-cliRed Hat Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution 6.2 Medium -
eap7-jboss-server-migration-cliRed Hat HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store 4.6 Medium -
eap7-jboss-server-migration-cliRed Hat Apache CXF: Denial of Service vulnerability with temporary files 5.9 Medium -
eap7-jboss-server-migration-cliRed Hat Org.jboss.hal:hal-console: wildfly hal console cross-site scripting 6.5 Medium -
eap7-jboss-server-migration-cliRed Hat Withdrawn Advisory: undertow: information leakage via HTTP/2 request header reuse 7.5 High -
eap7-jboss-server-migration-cliRed Hat hornetq vulnerable to file overwrite, sensitive information disclosure 7.1 High -
eap7-jboss-server-migration-cliRed Hat Wildfly: wildfly vulnerable to cross-site scripting (xss) 6.1 Medium -
eap7-jboss-server-migration-cliRed Hat Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader 4.3 Medium -
eap7-jboss-server-migration-cliRed Hat Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK) 9.2 Critical -
eap7-jboss-server-migration-cliRed Hat Undertow: cookie smuggling/spoofing 7.4 High -
eap7-jboss-server-migration-cliRed Hat Undertow: unrestricted request storage leads to memory exhaustion 7.5 High -
eap7-jboss-server-migration-cliRed Hat Undertow: improper state management in proxy protocol parsing causes information leakage 7.5 High -
eap7-jboss-server-migration-cliRed Hat Undertow: learningpushhandler can lead to remote memory dos attacks 5.3 Medium -
eap7-jboss-server-migration-cliRed Hat Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket 7.5 High -
eap7-jboss-server-migration-cliRed Hat Memory Exhaustion in braces 7.5 High -
eap7-jboss-server-migration-cliRed Hat Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. 7.5 High -
eap7-jboss-server-migration-cliRed Hat Bouncy Castle crafted signature and public key can be used to trigger an infinite loop 7.5 High -
eap7-jboss-server-migration-cliRed Hat Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") 5.9 Medium -
eap7-jboss-server-migration-cliRed Hat Wildfly: no timeout for eap management interface may lead to denial of service (dos) 4.1 Medium -
eap7-jboss-server-migration-cliRed Hat Eap: wildfly-elytron has a ssrf security issue 7.3 High -
eap7-jboss-server-migration-cliRed Hat Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames 7.5 High -
eap7-jboss-server-migration-cliRed Hat Xnio: stackoverflowexception when the chain of notifier states becomes problematically big 7.5 High -
eap7-jboss-server-migration-cliRed Hat Apache CXF SSRF Vulnerability using the Aegis databinding 9.3 Critical -
eap7-jboss-server-migration-cliRed Hat Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol 7.5 High - Show olderLoading…