eap7-picketbox vulnerabilities (Red Hat)
71 vulnerabilities.
-
eap7-picketboxRed Hat wildfly-core allows user with access to management interface to access vault expression, retrieve item from vault 3.3 Low -
eap7-picketboxRed Hat Undertow vulnerable to memory exhaustion due to buffer leak 7.5 High -
eap7-picketboxRed Hat undertow Race Condition vulnerability 5.9 Medium -
eap7-picketboxRed Hat Local Information Disclosure Vulnerability in io.netty:netty-codec-http 5.5 Medium -
eap7-picketboxRed Hat Deserialization of Untrusted Data 7.7 High -
eap7-picketboxRed Hat Prototype Pollution in minimist 9.8 Critical -
eap7-picketboxRed Hat Privilege Context Switching Error in wildlfy 5.4 Medium -
eap7-picketboxRed Hat Directory traversal in Eclipse Mojarra 6.5 Medium -
eap7-picketboxRed Hat Uncontrolled Resource Consumption in XNIO 5.9 Medium -
eap7-picketboxRed Hat Permissions bypass in SmallRye 4.4 Medium -
eap7-picketboxRed Hat Cross-site scripting in RESTEasy 6.1 Medium -
eap7-picketboxRed Hat Improper Input Validation in Jakarta Expression Language 5.3 Medium -
eap7-picketboxRed Hat Possible limited path traversal vulnerabily in Apache Commons IO 4.8 Medium -
eap7-picketboxRed Hat A flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy... 6.5 Medium -
eap7-picketboxRed Hat Improper Input Validation in Xerces 5.3 Medium -
eap7-picketboxRed Hat Allocation of Resources Without Limits or Throttling in Undertow 7.5 High -
eap7-picketboxRed Hat HTTP Request Smuggling in Undertow 6.5 Medium -
eap7-picketboxRed Hat Improper Input Validation in RESTEasy 7.5 High -
eap7-picketboxRed Hat A flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently... 4.2 Medium -
eap7-picketboxRed Hat Improper Authorization in Undertoe 8.6 High -
eap7-picketboxRed Hat Improper Input Validation in Undertow 8.1 High -
eap7-picketboxRed Hat Apache CXF JMX Integration is vulnerable to a MITM attack 5.3 Medium -
eap7-picketboxRed Hat Inadequate Encryption Strength and Algorithm Downgrade in Wildfly 7.4 High -
eap7-picketboxRed Hat jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
eap7-picketboxRed Hat jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
eap7-picketboxRed Hat jackson-databind mishandles the interaction between serialization gadgets and typing 9.8 Critical -
eap7-picketboxRed Hat Deserialization of Untrusted Data in jackson-databind 9.8 Critical -
eap7-picketboxRed Hat Denial of Service in Cryptacular 7.5 High -
eap7-picketboxRed Hat Reflected Cross-Site Scripting in Apache CXF 6.1 Medium -
eap7-picketboxRed Hat Private key leak in Apache CXF 7.5 High -
eap7-picketboxRed Hat A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests... 7.5 High -
eap7-picketboxRed Hat Improper Restriction of XML External Entity Reference in jackson-mapper-asl 5.9 Medium -
eap7-picketboxRed Hat Loop with Unreachable Exit Condition in Apache Thrift 7.5 High -
eap7-picketboxRed Hat Out-of-bounds read in Apache Thrift 7.5 High -
eap7-picketboxRed Hat Wildfly Authorization Misconfiguration 5.2 Medium -
eap7-picketboxRed Hat Potential to access user credentials from the log files when debug logging enabled 4.8 Medium -
eap7-picketboxRed Hat Deserialization of Untrusted Data in org.codehaus.jackson:jackson-mapper-asl 8.1 High -
eap7-picketboxRed Hat Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service 7.5 High -
eap7-picketboxRed Hat Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service 7.5 High -
eap7-picketboxRed Hat Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service 7.5 High -
eap7-picketboxRed Hat Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service 7.5 High -
eap7-picketboxRed Hat Deserialization of untrusted data in FasterXML jackson-databind 9.8 Critical -
eap7-picketboxRed Hat Undertow Missing Authorization when requesting a protected directory without trailing slash 5.3 Medium -
eap7-picketboxRed Hat Deserialization of Untrusted Data in FasterXML jackson-databind 5.9 Medium -
eap7-picketboxRed Hat Deserialization of untrusted data in FasterXML jackson-databind 5.9 Medium -
eap7-picketboxRed Hat Information exposure in FasterXML jackson-databind 7.5 High -
eap7-picketboxRed Hat An information disclosure vulnerability was found in JBoss Enterprise Application Platform before... 3.5 Low -
eap7-picketboxRed Hat The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when... 5.3 Medium -
eap7-picketboxRed Hat It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows... 7.7 High -
eap7-picketboxRed Hat Undertow Request Smuggling vulnerability 2.6 Low - Show olderLoading…