eap7-wildfly vulnerabilities (Red Hat)
342 vulnerabilities.
eap7-wildflyRed HatDenial of Service attack on windows app using Netty5.5 Mediumeap7-wildflyRed HatSslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine7.5 Higheap7-wildflyRed HatDenial of Service attack on windows app using Netty5.5 Mediumeap7-wildflyRed HatNetty HttpPostRequestDecoder can OOM5.3 Mediumeap7-wildflyRed HatApache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK7.5 Higheap7-wildflyRed HatUndertow: outofmemoryerror due to @multipartconfig handling7.5 Higheap7-wildflyRed HatImproper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write8.8 Higheap7-wildflyRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Higheap7-wildflyRed HatApache MINA SSHD: Information disclosure bugs with RootedFilesystem5.0 Mediumeap7-wildflyRed HatBouncy Castle For Java LDAP injection vulnerability5.3 Mediumeap7-wildflyRed Hattough-cookie Prototype Pollution vulnerability6.5 Mediumeap7-wildflyRed Hatsemver vulnerable to Regular Expression Denial of Service5.3 Mediumeap7-wildflyRed Hatnetty-handler SniHandler 16MB allocation6.5 Mediumeap7-wildflyRed HatUse of temporary directory for file creation in `FileBackedOutputStream` in Guava5.5 Mediumeap7-wildflyRed HatCookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty2.4 Loweap7-wildflyRed HatOutOfMemoryError for large multipart without filename in Eclipse Jetty5.3 Mediumeap7-wildflyRed HatUndertow: infinite loop in sslconduit during close7.5 Higheap7-wildflyRed Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 Higheap7-wildflyRed HatInfinite recursion in Jettison leads to denial of service when creating a crafted JSONArray5.9 Mediumeap7-wildflyRed HatApache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender7.5 Higheap7-wildflyRed HatUndertow client not checking server identity presented by server certificate in https connections7.5 Higheap7-wildflyRed HatInsecure Temporary File in RESTEasy5.5 Mediumeap7-wildflyRed HatWildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator7.4 Higheap7-wildflyRed HatApache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider5.5 Mediumeap7-wildflyRed HatApache CXF SSRF Vulnerability9.8 Criticaleap7-wildflyRed HatApache CXF directory listing / code exfiltration7.5 Higheap7-wildflyRed HatJettison Out-of-bounds Write vulnerability7.5 Higheap7-wildflyRed HatHAProxyMessageDecoder Stack Exhaustion DoS5.3 Mediumeap7-wildflyRed HatRemote Code execution in SnakeYAML8.3 Higheap7-wildflyRed HatApache MINA SSHD: Java unsafe deserialization vulnerability9.8 Criticaleap7-wildflyRed HatStack Overflow in Snakeyaml5.8 Mediumeap7-wildflyRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticaleap7-wildflyRed HatRemote code execution in HyperSQL DataBase8.0 Higheap7-wildflyRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Higheap7-wildflyRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Higheap7-wildflyRed HatStack Buffer Overflow in Woodstox6.5 Mediumeap7-wildflyRed HatStack Buffer Overflow in Jettison6.5 Mediumeap7-wildflyRed HatStack Buffer Overflow in Jettison6.5 Mediumeap7-wildflyRed HatDoS in SnakeYAML6.5 Mediumeap7-wildflyRed HatA flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response...7.5 Higheap7-wildflyRed HatA flaw was found in Undertow. A potential security issue in flow control handling by the browser...7.5 Higheap7-wildflyRed HatDenial of Service (DoS)7.5 Higheap7-wildflyRed Hatjsoup may not sanitize Cross-Site Scripting (XSS) attempts if SafeList.preserveRelativeLinks is enabled6.1 Mediumeap7-wildflyRed HatXNIO `notifyReadClosed` method logging message to unexpected end7.5 Higheap7-wildflyRed Hatwildfly-core allows user with access to management interface to access vault expression, retrieve item from vault3.3 Loweap7-wildflyRed HatUndertow vulnerable to Dos via Large AJP request7.5 Higheap7-wildflyRed HatApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets7.5 Higheap7-wildflyRed HatUndertow vulnerable to Denial of Service (DoS) attacks7.5 Higheap7-wildflyRed HatUndertow vulnerable to memory exhaustion due to buffer leak7.5 Higheap7-wildflyRed Hatundertow Race Condition vulnerability5.9 Medium- Show moreLoading…