eap7-stax2-api vulnerabilities (Red Hat)

30 vulnerabilities.

• eap7-stax2-api Red Hat Local Information Disclosure Vulnerability in io.netty:netty-codec-http CVE-2022-24823 Fix available 5.5 MediumMay 6, 2022
• eap7-stax2-api Red Hat Deserialization of Untrusted Data CVE-2022-25647 Fix available EPSS 12.2% 7.7 HighMay 1, 2022
• eap7-stax2-api Red Hat Prototype Pollution in minimist CVE-2021-44906 Public exploitFix available 9.8 CriticalMarch 17, 2022
• eap7-stax2-api Red Hat Privilege Context Switching Error in wildlfy CVE-2020-1719 Fix available 5.4 MediumJune 7, 2021
• eap7-stax2-api Red Hat Directory traversal in Eclipse Mojarra CVE-2020-6950 Public exploitFix available EPSS 10.1% 6.5 MediumJune 2, 2021
• eap7-stax2-api Red Hat Permissions bypass in SmallRye CVE-2020-1729 Fix available 4.4 MediumMay 28, 2021
• eap7-stax2-api Red Hat Cross-site scripting in RESTEasy CVE-2020-10688 Fix available 6.1 MediumMay 27, 2021
• eap7-stax2-api Red Hat Allocation of Resources Without Limits or Throttling in Undertow CVE-2020-10705 Fix available 7.5 HighJune 10, 2020
• eap7-stax2-api Red Hat HTTP Request Smuggling in Undertow CVE-2020-10719 Fix available 6.5 MediumMay 26, 2020
• eap7-stax2-api Red Hat Improper Input Validation in RESTEasy CVE-2020-1695 Fix available 7.5 HighMay 19, 2020
• eap7-stax2-api Red Hat Improper Authorization in Undertoe CVE-2020-1745 Fix available 8.6 HighApril 28, 2020
• eap7-stax2-api Red Hat Improper Input Validation in Undertow CVE-2020-1757 Fix available 8.1 HighApril 21, 2020
• eap7-stax2-api Red Hat Inadequate Encryption Strength and Algorithm Downgrade in Wildfly CVE-2019-14887 7.4 HighMarch 16, 2020
• eap7-stax2-api Red Hat jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9546 Fix available 9.8 CriticalMarch 2, 2020
• eap7-stax2-api Red Hat jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9547 Public exploitFix available EPSS 18.4% 9.8 CriticalMarch 2, 2020
• eap7-stax2-api Red Hat jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9548 Public exploitFix available EPSS 18.9% 9.8 CriticalMarch 2, 2020
• eap7-stax2-api Red Hat Deserialization of Untrusted Data in jackson-databind CVE-2020-8840 Public exploitFix available EPSS 26.6% 9.8 CriticalFebruary 10, 2020
• eap7-stax2-api Red Hat HTTP Request Smuggling in Netty CVE-2019-20444 Fix available 9.1 CriticalJanuary 29, 2020
• eap7-stax2-api Red Hat HTTP Request Smuggling in Netty CVE-2019-20445 Fix available EPSS 13.8% 9.1 CriticalJanuary 29, 2020
• eap7-stax2-api Red Hat HTTP Request Smuggling in Netty CVE-2020-7238 Fix available 7.5 HighJanuary 27, 2020
• eap7-stax2-api Red Hat Denial of Service in Cryptacular CVE-2020-7226 Fix available 7.5 HighJanuary 24, 2020
• eap7-stax2-api Red Hat Reflected Cross-Site Scripting in Apache CXF CVE-2019-17573 Public exploitFix available 6.1 MediumJanuary 16, 2020
• eap7-stax2-api Red Hat Private key leak in Apache CXF CVE-2019-12423 Fix available 7.5 HighJanuary 16, 2020
• eap7-stax2-api Red Hat Improper Restriction of XML External Entity Reference in jackson-mapper-asl CVE-2019-10172 Public exploitFix available EPSS 17.0% 5.9 MediumNovember 18, 2019
• eap7-stax2-api Red Hat Loop with Unreachable Exit Condition in Apache Thrift CVE-2019-0205 Public exploitFix available 7.5 HighOctober 28, 2019
• eap7-stax2-api Red Hat Out-of-bounds read in Apache Thrift CVE-2019-0210 Fix available 7.5 HighOctober 28, 2019
• eap7-stax2-api Red Hat Improper input validation in Apache Santuario XML Security for Java CVE-2019-12400 Fix available 5.5 MediumAugust 23, 2019
• eap7-stax2-api Red Hat Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019
• eap7-stax2-api Red Hat keycloak-core discloses system properties CVE-2017-2582 Fix available 6.5 MediumJuly 26, 2018
• eap7-stax2-api Red Hat Path Traversal in Eclipse Mojarra CVE-2018-14371 Fix available 7.5 HighJuly 18, 2018