eap7-opensaml-core vulnerabilities (Red Hat)

27 vulnerabilities.

• eap7-opensaml-core Red Hat hornetq vulnerable to file overwrite, sensitive information disclosure CVE-2024-51127 Fix available 7.1 HighNovember 4, 2024
• eap7-opensaml-core Red Hat Local Information Disclosure Vulnerability in io.netty:netty-codec-http CVE-2022-24823 Fix available 5.5 MediumMay 6, 2022
• eap7-opensaml-core Red Hat Deserialization of Untrusted Data CVE-2022-25647 Fix available EPSS 12.2% 7.7 HighMay 1, 2022
• eap7-opensaml-core Red Hat Prototype Pollution in minimist CVE-2021-44906 Public exploitFix available 9.8 CriticalMarch 17, 2022
• eap7-opensaml-core Red Hat Privilege Context Switching Error in wildlfy CVE-2020-1719 Fix available 5.4 MediumJune 7, 2021
• eap7-opensaml-core Red Hat Directory traversal in Eclipse Mojarra CVE-2020-6950 Public exploitFix available EPSS 10.1% 6.5 MediumJune 2, 2021
• eap7-opensaml-core Red Hat Permissions bypass in SmallRye CVE-2020-1729 Fix available 4.4 MediumMay 28, 2021
• eap7-opensaml-core Red Hat Cross-site scripting in RESTEasy CVE-2020-10688 Fix available 6.1 MediumMay 27, 2021
• eap7-opensaml-core Red Hat Allocation of Resources Without Limits or Throttling in Undertow CVE-2020-10705 Fix available 7.5 HighJune 10, 2020
• eap7-opensaml-core Red Hat HTTP Request Smuggling in Undertow CVE-2020-10719 Fix available 6.5 MediumMay 26, 2020
• eap7-opensaml-core Red Hat Improper Input Validation in RESTEasy CVE-2020-1695 Fix available 7.5 HighMay 19, 2020
• eap7-opensaml-core Red Hat A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently... CVE-2020-1732 4.2 MediumMay 4, 2020
• eap7-opensaml-core Red Hat Improper Authorization in Undertoe CVE-2020-1745 Fix available 8.6 HighApril 28, 2020
• eap7-opensaml-core Red Hat Improper Input Validation in Undertow CVE-2020-1757 Fix available 8.1 HighApril 21, 2020
• eap7-opensaml-core Red Hat Inadequate Encryption Strength and Algorithm Downgrade in Wildfly CVE-2019-14887 7.4 HighMarch 16, 2020
• eap7-opensaml-core Red Hat jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9546 Fix available 9.8 CriticalMarch 2, 2020
• eap7-opensaml-core Red Hat jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9547 Public exploitFix available EPSS 18.4% 9.8 CriticalMarch 2, 2020
• eap7-opensaml-core Red Hat jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9548 Public exploitFix available EPSS 18.9% 9.8 CriticalMarch 2, 2020
• eap7-opensaml-core Red Hat Deserialization of Untrusted Data in jackson-databind CVE-2020-8840 Public exploitFix available EPSS 26.6% 9.8 CriticalFebruary 10, 2020
• eap7-opensaml-core Red Hat Denial of Service in Cryptacular CVE-2020-7226 Fix available 7.5 HighJanuary 24, 2020
• eap7-opensaml-core Red Hat Reflected Cross-Site Scripting in Apache CXF CVE-2019-17573 Public exploitFix available 6.1 MediumJanuary 16, 2020
• eap7-opensaml-core Red Hat Private key leak in Apache CXF CVE-2019-12423 Fix available 7.5 HighJanuary 16, 2020
• eap7-opensaml-core Red Hat Improper Restriction of XML External Entity Reference in jackson-mapper-asl CVE-2019-10172 Public exploitFix available EPSS 17.0% 5.9 MediumNovember 18, 2019
• eap7-opensaml-core Red Hat Loop with Unreachable Exit Condition in Apache Thrift CVE-2019-0205 Public exploitFix available 7.5 HighOctober 28, 2019
• eap7-opensaml-core Red Hat Out-of-bounds read in Apache Thrift CVE-2019-0210 Fix available 7.5 HighOctober 28, 2019
• eap7-opensaml-core Red Hat keycloak-core discloses system properties CVE-2017-2582 Fix available 6.5 MediumJuly 26, 2018
• eap7-opensaml-core Red Hat Path Traversal in Eclipse Mojarra CVE-2018-14371 Fix available 7.5 HighJuly 18, 2018