eap7-jsoup vulnerabilities (Red Hat)

47 vulnerabilities.

• eap7-jsoup Red Hat Undertow: unrestricted request storage leads to memory exhaustion CVE-2023-1973 Fix available 7.5 HighSeptember 27, 2024
• eap7-jsoup Red Hat Memory Exhaustion in braces CVE-2024-4068 Fix available 7.5 HighMay 13, 2024
• eap7-jsoup Red Hat Wildfly: no timeout for eap management interface may lead to denial of service (dos) CVE-2024-4029 4.1 MediumMay 2, 2024
• eap7-jsoup Red Hat Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol CVE-2024-1635 Fix available 7.5 HighFebruary 19, 2024
• eap7-jsoup Red Hat jose4j denial of service via specifically crafted JWE CVE-2023-51775 Fix available 6.5 MediumDecember 25, 2023
• eap7-jsoup Red Hat Undertow: outofmemoryerror due to @multipartconfig handling CVE-2023-3223 Fix available 7.5 HighSeptember 27, 2023
• eap7-jsoup Red Hat Undertow: infinite loop in sslconduit during close CVE-2023-1108 Fix available 7.5 HighApril 7, 2023
• eap7-jsoup Red Hat Stack Buffer Overflow in Woodstox CVE-2022-40152 Fix available EPSS 18.2% 6.5 MediumSeptember 16, 2022
• eap7-jsoup Red Hat Stack Buffer Overflow in Jettison CVE-2022-40149 Fix available 6.5 MediumSeptember 16, 2022
• eap7-jsoup Red Hat A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response... CVE-2022-1319 Fix available 7.5 HighAugust 31, 2022
• eap7-jsoup Red Hat Denial of Service (DoS) CVE-2022-25857 Fix available 7.5 HighAugust 30, 2022
• eap7-jsoup Red Hat jsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled CVE-2022-36033 Fix available 6.1 MediumAugust 29, 2022
• eap7-jsoup Red Hat XNIO `notifyReadClosed` method logging message to unexpected end CVE-2022-0084 Fix available 7.5 HighAugust 26, 2022
• eap7-jsoup Red Hat Undertow vulnerable to Dos via Large AJP request CVE-2022-2053 Fix available 7.5 HighAugust 5, 2022
• eap7-jsoup Red Hat Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets CVE-2022-34169 Public exploitFix available EPSS 81.8% 7.5 HighJuly 19, 2022
• eap7-jsoup Red Hat Undertow vulnerable to Denial of Service (DoS) attacks CVE-2021-3859 Fix available 7.5 HighJuly 15, 2022
• eap7-jsoup Red Hat Undertow vulnerable to memory exhaustion due to buffer leak CVE-2021-3690 Fix available 7.5 HighJuly 15, 2022
• eap7-jsoup Red Hat Undertow Uncontrolled Resource Consumption CVE-2021-3629 Fix available 5.9 MediumMay 24, 2022
• eap7-jsoup Red Hat Wildfly-Core user account mismanagement CVE-2021-3717 Fix available 7.8 HighMay 24, 2022
• eap7-jsoup Red Hat Local Information Disclosure Vulnerability in io.netty:netty-codec-http CVE-2022-24823 Fix available 5.5 MediumMay 6, 2022
• eap7-jsoup Red Hat Deserialization of Untrusted Data CVE-2022-25647 Fix available EPSS 12.2% 7.7 HighMay 1, 2022
• eap7-jsoup Red Hat Path Traversal in Moment.js CVE-2022-24785 Public exploitFix available EPSS 13.8% 7.5 HighApril 4, 2022
• eap7-jsoup Red Hat Prototype Pollution in minimist CVE-2021-44906 Public exploitFix available 9.8 CriticalMarch 17, 2022
• eap7-jsoup Red Hat Apache ActiveMQ Artemis DoS CVE-2022-23913 Fix available 7.5 HighFebruary 4, 2022
• eap7-jsoup Red Hat Bypass of the secureValidation property CVE-2021-40690 Fix available 7.5 HighSeptember 19, 2021
• eap7-jsoup Red Hat Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions CVE-2021-37714 Fix available 7.5 HighAugust 18, 2021
• eap7-jsoup Red Hat Observable Discrepancy in Wildfly Elytron CVE-2021-3642 Fix available 5.3 MediumAugust 5, 2021
• eap7-jsoup Red Hat DoS/OOM leak vulnerability in Apache Mina SSHD Server CVE-2021-30129 Fix available 6.5 MediumJuly 12, 2021
• eap7-jsoup Red Hat Exposure of class information in RESTEasy CVE-2021-20289 Fix available 5.3 MediumMarch 26, 2021
• eap7-jsoup Red Hat An information disclosure vulnerability was found in JBoss Enterprise Application Platform before... CVE-2016-7061 3.5 LowSeptember 10, 2018
• eap7-jsoup Red Hat It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows... CVE-2017-2595 7.7 HighJuly 27, 2018
• eap7-jsoup Red Hat Undertow Request Smuggling vulnerability CVE-2017-12165 Fix available 2.6 LowJuly 27, 2018
• eap7-jsoup Red Hat keycloak-core discloses system properties CVE-2017-2582 Fix available 6.5 MediumJuly 26, 2018
• eap7-jsoup Red Hat It was found in EAP 7 before 7.0.9 that properties based files of the management and the... CVE-2017-12167 5.5 MediumJuly 26, 2018
• eap7-jsoup Red Hat Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in... CVE-2016-8656 7.0 HighMay 22, 2018
• eap7-jsoup Red Hat admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download... CVE-2016-8627 4.3 MediumMay 11, 2018
• eap7-jsoup Red Hat Red Hat Wildfly DoS CVE-2016-9589 Fix available 7.5 HighMarch 12, 2018
• eap7-jsoup Red Hat Undertow vulnerable to Request Smuggling CVE-2017-7559 Fix available 6.1 MediumJanuary 10, 2018
• eap7-jsoup Red Hat Privilege Escalation in Hibernate Validator CVE-2017-7536 Fix available 7.0 HighJanuary 10, 2018
• eap7-jsoup Red Hat Get requests in JBoss Enterprise Application Platform (EAP) 7 disclose internal IP addresses to... CVE-2016-6311 5.3 MediumAugust 22, 2017
• eap7-jsoup Red Hat jackson-databind is vulnerable to a deserialization flaw CVE-2017-7525 Public exploitFix available EPSS 37.7% 9.8 CriticalAugust 11, 2017
• eap7-jsoup Red Hat Moderate severity vulnerability that affects io.undertow:undertow-core CVE-2017-2670 Fix available 7.5 HighJuly 11, 2017
• eap7-jsoup Red Hat Undertow-core vulnerable to HTTP Request Smuggling CVE-2017-2666 Public exploitFix available 6.5 MediumJuly 11, 2017
• eap7-jsoup Red Hat Undertow Uncaught Exception vulnerability CVE-2016-7046 Fix available 5.9 MediumOctober 3, 2016
• eap7-jsoup Red Hat Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain CVE-2016-4978 Fix available 7.2 HighSeptember 27, 2016
• eap7-jsoup Red Hat The domain controller in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2... CVE-2016-5406 8.8 HighSeptember 26, 2016
• eap7-jsoup Red Hat Improper Neutralization of CRLF Sequences in Wildfly Undertow CVE-2016-4993 Fix available 6.1 MediumSeptember 26, 2016