eap7-wildfly vulnerabilities (Red Hat)
342 vulnerabilities.
eap7-wildflyRed HatUndertow Uncontrolled Resource Consumption5.9 Mediumeap7-wildflyRed HatWildfly-Core user account mismanagement7.8 Higheap7-wildflyRed HatThis is a concurrency issue that can result in the wrong caller principal being returned from the...5.3 Mediumeap7-wildflyRed HatLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumeap7-wildflyRed HatDeserialization of Untrusted Data7.7 Higheap7-wildflyRed HatPath Traversal in Moment.js7.5 Higheap7-wildflyRed HatPrototype Pollution in minimist9.8 Criticaleap7-wildflyRed HatA flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss...7.5 Higheap7-wildflyRed HatDeeply nested json in jackson-databind7.5 Higheap7-wildflyRed HatApache ActiveMQ Artemis DoS7.5 Higheap7-wildflyRed HatInfinite loop within Apache XercesJ xml parser6.5 Mediumeap7-wildflyRed HatVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...5.3 Mediumeap7-wildflyRed HatArbitrary code execution in H2 Console9.8 Criticaleap7-wildflyRed HatA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.8.8 Higheap7-wildflyRed HatSQL injection in JDBC Appender in Apache Log4j V19.8 Criticaleap7-wildflyRed HatDeserialization of untrusted data in JMSSink in Apache Log4j 1.x8.8 Higheap7-wildflyRed HatRCE in H2 Console9.8 Criticaleap7-wildflyRed HatApache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack9.0 Criticaleap7-wildflyRed HatDeserialization of untrusted data in JMSAppender in Apache Log4j 1.27.5 Higheap7-wildflyRed HatApache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints10.0 Criticaleap7-wildflyRed HatHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 Mediumeap7-wildflyRed HatCross-site Scripting (XSS)3.1 Loweap7-wildflyRed HatBypass of the secureValidation property7.5 Higheap7-wildflyRed HatSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 Higheap7-wildflyRed HatBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 Higheap7-wildflyRed HatCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions7.5 Higheap7-wildflyRed HatObservable Discrepancy in Wildfly Elytron5.3 Mediumeap7-wildflyRed HatDoS/OOM leak vulnerability in Apache Mina SSHD Server6.5 Mediumeap7-wildflyRed HatPrivilege Context Switching Error in wildlfy5.4 Mediumeap7-wildflyRed HatDirectory traversal in Eclipse Mojarra6.5 Mediumeap7-wildflyRed HatUncontrolled Resource Consumption in jboss-remoting5.9 Mediumeap7-wildflyRed HatUncontrolled Resource Consumption in XNIO5.9 Mediumeap7-wildflyRed HatPermissions bypass in SmallRye4.4 Mediumeap7-wildflyRed HatCross-site scripting in RESTEasy6.1 Mediumeap7-wildflyRed HatImproper Input Validation in Jakarta Expression Language5.3 Mediumeap7-wildflyRed HatCross-site Scripting in Wildfly4.8 Mediumeap7-wildflyRed HatJBoss EJB Client information disclosure vulnerability4.3 Mediumeap7-wildflyRed HatPossible limited path traversal vulnerabily in Apache Commons IO4.8 Mediumeap7-wildflyRed HatPossible request smuggling in HTTP/2 due missing validation of content-length5.9 Mediumeap7-wildflyRed HatExposure of class information in RESTEasy5.3 Mediumeap7-wildflyRed HatVelocity Sandbox Bypass8.8 Higheap7-wildflyRed HatPossible request smuggling in HTTP/2 due missing validation5.9 Mediumeap7-wildflyRed HatDenial of service in Undertow7.5 Higheap7-wildflyRed HatHTTP request smuggling in Undertow4.8 Mediumeap7-wildflyRed HatUncontrolled Resource Consumption in Apache Thrift7.5 Higheap7-wildflyRed HatLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files6.2 Mediumeap7-wildflyRed HatLogic error in Legion of the Bouncy Castle BC Java8.1 Higheap7-wildflyRed HatTemp directory permission issue in Guava3.3 Loweap7-wildflyRed HatWildfly has a memory leak vulnerability5.9 Mediumeap7-wildflyRed HatSQL injection in hibernate-core7.4 High- Show moreLoading…