eap7-wildfly-http-client-common vulnerabilities (Red Hat)
152 vulnerabilities.
-
eap7-wildfly-http-client-commonRed Hat Withdrawn Advisory: undertow: information leakage via HTTP/2 request header reuse 7.5 High -
eap7-wildfly-http-client-commonRed Hat Eap: wildfly-elytron has a ssrf security issue 7.3 High -
eap7-wildfly-http-client-commonRed Hat Apache CXF SSRF Vulnerability using the Aegis databinding 9.3 Critical -
eap7-wildfly-http-client-commonRed Hat Undertow: ajp request closes connection exceeding maxrequestsize 7.5 High -
eap7-wildfly-http-client-commonRed Hat Undertow: infinite loop in sslconduit during close 7.5 High -
eap7-wildfly-http-client-commonRed Hat Undertow client not checking server identity presented by server certificate in https connections 7.5 High -
eap7-wildfly-http-client-commonRed Hat Insecure Temporary File in RESTEasy 5.5 Medium -
eap7-wildfly-http-client-commonRed Hat Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator 7.4 High -
eap7-wildfly-http-client-commonRed Hat Apache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider 5.5 Medium -
eap7-wildfly-http-client-commonRed Hat HAProxyMessageDecoder Stack Exhaustion DoS 5.3 Medium -
eap7-wildfly-http-client-commonRed Hat Remote Code execution in SnakeYAML 8.3 High -
eap7-wildfly-http-client-commonRed Hat Stack Overflow in Snakeyaml 5.8 Medium -
eap7-wildfly-http-client-commonRed Hat Remote code execution in HyperSQL DataBase 8.0 High -
eap7-wildfly-http-client-commonRed Hat DoS in SnakeYAML 6.5 Medium -
eap7-wildfly-http-client-commonRed Hat A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response... 7.5 High -
eap7-wildfly-http-client-commonRed Hat A flaw was found in Undertow. A potential security issue in flow control handling by the browser... 7.5 High -
eap7-wildfly-http-client-commonRed Hat XNIO `notifyReadClosed` method logging message to unexpected end 7.5 High -
eap7-wildfly-http-client-commonRed Hat wildfly-core allows user with access to management interface to access vault expression, retrieve item from vault 3.3 Low -
eap7-wildfly-http-client-commonRed Hat Undertow vulnerable to memory exhaustion due to buffer leak 7.5 High -
eap7-wildfly-http-client-commonRed Hat undertow Race Condition vulnerability 5.9 Medium -
eap7-wildfly-http-client-commonRed Hat This is a concurrency issue that can result in the wrong caller principal being returned from the... 5.3 Medium -
eap7-wildfly-http-client-commonRed Hat Local Information Disclosure Vulnerability in io.netty:netty-codec-http 5.5 Medium -
eap7-wildfly-http-client-commonRed Hat Deserialization of Untrusted Data 7.7 High -
eap7-wildfly-http-client-commonRed Hat Path Traversal in Moment.js 7.5 High -
eap7-wildfly-http-client-commonRed Hat Prototype Pollution in minimist 9.8 Critical -
eap7-wildfly-http-client-commonRed Hat A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss... 7.5 High -
eap7-wildfly-http-client-commonRed Hat Deeply nested json in jackson-databind 7.5 High -
eap7-wildfly-http-client-commonRed Hat Apache ActiveMQ Artemis DoS 7.5 High -
eap7-wildfly-http-client-commonRed Hat Infinite loop within Apache XercesJ xml parser 6.5 Medium -
eap7-wildfly-http-client-commonRed Hat Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ... 5.3 Medium -
eap7-wildfly-http-client-commonRed Hat Arbitrary code execution in H2 Console 9.8 Critical -
eap7-wildfly-http-client-commonRed Hat RCE in H2 Console 9.8 Critical -
eap7-wildfly-http-client-commonRed Hat HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling 6.5 Medium -
eap7-wildfly-http-client-commonRed Hat Cross-site Scripting (XSS) 3.1 Low -
eap7-wildfly-http-client-commonRed Hat SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way 7.5 High -
eap7-wildfly-http-client-commonRed Hat Bzip2Decoder doesn't allow setting size restrictions for decompressed data 7.5 High -
eap7-wildfly-http-client-commonRed Hat Privilege Context Switching Error in wildlfy 5.4 Medium -
eap7-wildfly-http-client-commonRed Hat Directory traversal in Eclipse Mojarra 6.5 Medium -
eap7-wildfly-http-client-commonRed Hat Uncontrolled Resource Consumption in jboss-remoting 5.9 Medium -
eap7-wildfly-http-client-commonRed Hat Permissions bypass in SmallRye 4.4 Medium -
eap7-wildfly-http-client-commonRed Hat Cross-site scripting in RESTEasy 6.1 Medium -
eap7-wildfly-http-client-commonRed Hat Improper Input Validation in Jakarta Expression Language 5.3 Medium -
eap7-wildfly-http-client-commonRed Hat Cross-site Scripting in Wildfly 4.8 Medium -
eap7-wildfly-http-client-commonRed Hat JBoss EJB Client information disclosure vulnerability 4.3 Medium -
eap7-wildfly-http-client-commonRed Hat Possible limited path traversal vulnerabily in Apache Commons IO 4.8 Medium -
eap7-wildfly-http-client-commonRed Hat Possible request smuggling in HTTP/2 due missing validation of content-length 5.9 Medium -
eap7-wildfly-http-client-commonRed Hat Velocity Sandbox Bypass 8.8 High -
eap7-wildfly-http-client-commonRed Hat Possible request smuggling in HTTP/2 due missing validation 5.9 Medium -
eap7-wildfly-http-client-commonRed Hat Denial of service in Undertow 7.5 High -
eap7-wildfly-http-client-commonRed Hat HTTP request smuggling in Undertow 4.8 Medium - Show olderLoading…