eap7-microprofile-config-api vulnerabilities (Red Hat)

22 vulnerabilities.

• eap7-microprofile-config-api Red Hat Privilege Context Switching Error in wildlfy CVE-2020-1719 Fix available 5.4 MediumJune 7, 2021
• eap7-microprofile-config-api Red Hat Directory traversal in Eclipse Mojarra CVE-2020-6950 Public exploitFix available EPSS 10.1% 6.5 MediumJune 2, 2021
• eap7-microprofile-config-api Red Hat Permissions bypass in SmallRye CVE-2020-1729 Fix available 4.4 MediumMay 28, 2021
• eap7-microprofile-config-api Red Hat Cross-site scripting in RESTEasy CVE-2020-10688 Fix available 6.1 MediumMay 27, 2021
• eap7-microprofile-config-api Red Hat Allocation of Resources Without Limits or Throttling in Undertow CVE-2020-10705 Fix available 7.5 HighJune 10, 2020
• eap7-microprofile-config-api Red Hat HTTP Request Smuggling in Undertow CVE-2020-10719 Fix available 6.5 MediumMay 26, 2020
• eap7-microprofile-config-api Red Hat Improper Input Validation in RESTEasy CVE-2020-1695 Fix available 7.5 HighMay 19, 2020
• eap7-microprofile-config-api Red Hat Improper Authorization in Undertoe CVE-2020-1745 Fix available 8.6 HighApril 28, 2020
• eap7-microprofile-config-api Red Hat Improper Input Validation in Undertow CVE-2020-1757 Fix available 8.1 HighApril 21, 2020
• eap7-microprofile-config-api Red Hat Inadequate Encryption Strength and Algorithm Downgrade in Wildfly CVE-2019-14887 7.4 HighMarch 16, 2020
• eap7-microprofile-config-api Red Hat jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9546 Fix available 9.8 CriticalMarch 2, 2020
• eap7-microprofile-config-api Red Hat jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9547 Public exploitFix available EPSS 18.4% 9.8 CriticalMarch 2, 2020
• eap7-microprofile-config-api Red Hat jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9548 Public exploitFix available EPSS 18.9% 9.8 CriticalMarch 2, 2020
• eap7-microprofile-config-api Red Hat Deserialization of Untrusted Data in jackson-databind CVE-2020-8840 Public exploitFix available EPSS 26.6% 9.8 CriticalFebruary 10, 2020
• eap7-microprofile-config-api Red Hat Denial of Service in Cryptacular CVE-2020-7226 Fix available 7.5 HighJanuary 24, 2020
• eap7-microprofile-config-api Red Hat Reflected Cross-Site Scripting in Apache CXF CVE-2019-17573 Public exploitFix available 6.1 MediumJanuary 16, 2020
• eap7-microprofile-config-api Red Hat Private key leak in Apache CXF CVE-2019-12423 Fix available 7.5 HighJanuary 16, 2020
• eap7-microprofile-config-api Red Hat Improper Restriction of XML External Entity Reference in jackson-mapper-asl CVE-2019-10172 Public exploitFix available EPSS 17.0% 5.9 MediumNovember 18, 2019
• eap7-microprofile-config-api Red Hat Loop with Unreachable Exit Condition in Apache Thrift CVE-2019-0205 Public exploitFix available 7.5 HighOctober 28, 2019
• eap7-microprofile-config-api Red Hat Out-of-bounds read in Apache Thrift CVE-2019-0210 Fix available 7.5 HighOctober 28, 2019
• eap7-microprofile-config-api Red Hat keycloak-core discloses system properties CVE-2017-2582 Fix available 6.5 MediumJuly 26, 2018
• eap7-microprofile-config-api Red Hat Path Traversal in Eclipse Mojarra CVE-2018-14371 Fix available 7.5 HighJuly 18, 2018