eap7-wildfly-modules vulnerabilities (Red Hat)
342 vulnerabilities.
eap7-wildfly-modulesRed HatUndertow Uncontrolled Resource Consumption5.9 Mediumeap7-wildfly-modulesRed HatWildfly-Core user account mismanagement7.8 Higheap7-wildfly-modulesRed HatThis is a concurrency issue that can result in the wrong caller principal being returned from the...5.3 Mediumeap7-wildfly-modulesRed HatLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumeap7-wildfly-modulesRed HatDeserialization of Untrusted Data7.7 Higheap7-wildfly-modulesRed HatPath Traversal in Moment.js7.5 Higheap7-wildfly-modulesRed HatPrototype Pollution in minimist9.8 Criticaleap7-wildfly-modulesRed HatA flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss...7.5 Higheap7-wildfly-modulesRed HatDeeply nested json in jackson-databind7.5 Higheap7-wildfly-modulesRed HatApache ActiveMQ Artemis DoS7.5 Higheap7-wildfly-modulesRed HatInfinite loop within Apache XercesJ xml parser6.5 Mediumeap7-wildfly-modulesRed HatVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...5.3 Mediumeap7-wildfly-modulesRed HatArbitrary code execution in H2 Console9.8 Criticaleap7-wildfly-modulesRed HatA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.8.8 Higheap7-wildfly-modulesRed HatSQL injection in JDBC Appender in Apache Log4j V19.8 Criticaleap7-wildfly-modulesRed HatDeserialization of untrusted data in JMSSink in Apache Log4j 1.x8.8 Higheap7-wildfly-modulesRed HatRCE in H2 Console9.8 Criticaleap7-wildfly-modulesRed HatApache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack9.0 Criticaleap7-wildfly-modulesRed HatDeserialization of untrusted data in JMSAppender in Apache Log4j 1.27.5 Higheap7-wildfly-modulesRed HatApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints10.0 Criticaleap7-wildfly-modulesRed HatHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 Mediumeap7-wildfly-modulesRed HatCross-site Scripting (XSS)3.1 Loweap7-wildfly-modulesRed HatBypass of the secureValidation property7.5 Higheap7-wildfly-modulesRed HatSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 Higheap7-wildfly-modulesRed HatBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 Higheap7-wildfly-modulesRed HatCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions7.5 Higheap7-wildfly-modulesRed HatObservable Discrepancy in Wildfly Elytron5.3 Mediumeap7-wildfly-modulesRed HatDoS/OOM leak vulnerability in Apache Mina SSHD Server6.5 Mediumeap7-wildfly-modulesRed HatPrivilege Context Switching Error in wildlfy5.4 Mediumeap7-wildfly-modulesRed HatDirectory traversal in Eclipse Mojarra6.5 Mediumeap7-wildfly-modulesRed HatUncontrolled Resource Consumption in jboss-remoting5.9 Mediumeap7-wildfly-modulesRed HatUncontrolled Resource Consumption in XNIO5.9 Mediumeap7-wildfly-modulesRed HatPermissions bypass in SmallRye4.4 Mediumeap7-wildfly-modulesRed HatCross-site scripting in RESTEasy6.1 Mediumeap7-wildfly-modulesRed HatImproper Input Validation in Jakarta Expression Language5.3 Mediumeap7-wildfly-modulesRed HatCross-site Scripting in Wildfly4.8 Mediumeap7-wildfly-modulesRed HatJBoss EJB Client information disclosure vulnerability4.3 Mediumeap7-wildfly-modulesRed HatPossible limited path traversal vulnerabily in Apache Commons IO4.8 Mediumeap7-wildfly-modulesRed HatPossible request smuggling in HTTP/2 due missing validation of content-length5.9 Mediumeap7-wildfly-modulesRed HatExposure of class information in RESTEasy5.3 Mediumeap7-wildfly-modulesRed HatVelocity Sandbox Bypass8.8 Higheap7-wildfly-modulesRed HatPossible request smuggling in HTTP/2 due missing validation5.9 Mediumeap7-wildfly-modulesRed HatDenial of service in Undertow7.5 Higheap7-wildfly-modulesRed HatHTTP request smuggling in Undertow4.8 Mediumeap7-wildfly-modulesRed HatUncontrolled Resource Consumption in Apache Thrift7.5 Higheap7-wildfly-modulesRed HatLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 Mediumeap7-wildfly-modulesRed HatLogic error in Legion of the Bouncy Castle BC Java8.1 Higheap7-wildfly-modulesRed HatTemp directory permission issue in Guava3.3 Loweap7-wildfly-modulesRed HatWildfly has a memory leak vulnerability5.9 Mediumeap7-wildfly-modulesRed HatSQL injection in hibernate-core7.4 High- Show moreLoading…