eap7-wss4j-ws-security-policy-stax vulnerabilities (Red Hat)
77 vulnerabilities.
eap7-wss4j-ws-security-policy-staxRed HatApache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)9.2 Criticaleap7-wss4j-ws-security-policy-staxRed HatEap: wildfly-elytron has a ssrf security issue7.3 Higheap7-wss4j-ws-security-policy-staxRed HatXnio: stackoverflowexception when the chain of notifier states becomes problematically big7.5 Higheap7-wss4j-ws-security-policy-staxRed HatApache CXF SSRF Vulnerability using the Aegis databinding9.3 Criticaleap7-wss4j-ws-security-policy-staxRed HatEap-7: heap exhaustion via deserialization7.5 Higheap7-wss4j-ws-security-policy-staxRed HatApache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK7.5 Higheap7-wss4j-ws-security-policy-staxRed HatApache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender7.5 Higheap7-wss4j-ws-security-policy-staxRed HatApache CXF SSRF Vulnerability9.8 Criticaleap7-wss4j-ws-security-policy-staxRed HatRemote code execution in HyperSQL DataBase8.0 Higheap7-wss4j-ws-security-policy-staxRed HatApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets7.5 Higheap7-wss4j-ws-security-policy-staxRed HatUndertow vulnerable to Denial of Service (DoS) attacks7.5 Higheap7-wss4j-ws-security-policy-staxRed HatUndertow Uncontrolled Resource Consumption5.9 Mediumeap7-wss4j-ws-security-policy-staxRed HatWildfly-Core user account mismanagement7.8 Higheap7-wss4j-ws-security-policy-staxRed HatLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumeap7-wss4j-ws-security-policy-staxRed HatDeserialization of Untrusted Data7.7 Higheap7-wss4j-ws-security-policy-staxRed HatPrototype Pollution in minimist9.8 Criticaleap7-wss4j-ws-security-policy-staxRed HatArbitrary code execution in H2 Console9.8 Criticaleap7-wss4j-ws-security-policy-staxRed HatA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.8.8 Higheap7-wss4j-ws-security-policy-staxRed HatSQL injection in JDBC Appender in Apache Log4j V19.8 Criticaleap7-wss4j-ws-security-policy-staxRed HatDeserialization of untrusted data in JMSAppender in Apache Log4j 1.27.5 Higheap7-wss4j-ws-security-policy-staxRed HatCross-site Scripting (XSS)3.1 Loweap7-wss4j-ws-security-policy-staxRed HatBypass of the secureValidation property7.5 Higheap7-wss4j-ws-security-policy-staxRed HatCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions7.5 Higheap7-wss4j-ws-security-policy-staxRed HatObservable Discrepancy in Wildfly Elytron5.3 Mediumeap7-wss4j-ws-security-policy-staxRed HatPrivilege Context Switching Error in wildlfy5.4 Mediumeap7-wss4j-ws-security-policy-staxRed HatDirectory traversal in Eclipse Mojarra6.5 Mediumeap7-wss4j-ws-security-policy-staxRed HatPermissions bypass in SmallRye4.4 Mediumeap7-wss4j-ws-security-policy-staxRed HatCross-site scripting in RESTEasy6.1 Mediumeap7-wss4j-ws-security-policy-staxRed HatExposure of class information in RESTEasy5.3 Mediumeap7-wss4j-ws-security-policy-staxRed HatAllocation of Resources Without Limits or Throttling in Undertow7.5 Higheap7-wss4j-ws-security-policy-staxRed HatHTTP Request Smuggling in Undertow6.5 Mediumeap7-wss4j-ws-security-policy-staxRed HatImproper Input Validation in RESTEasy7.5 Higheap7-wss4j-ws-security-policy-staxRed HatA flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently...4.2 Mediumeap7-wss4j-ws-security-policy-staxRed HatImproper Authorization in Undertoe8.6 Higheap7-wss4j-ws-security-policy-staxRed HatImproper Input Validation in Undertow8.1 Higheap7-wss4j-ws-security-policy-staxRed HatInadequate Encryption Strength and Algorithm Downgrade in Wildfly7.4 Higheap7-wss4j-ws-security-policy-staxRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticaleap7-wss4j-ws-security-policy-staxRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticaleap7-wss4j-ws-security-policy-staxRed Hatjackson-databind mishandles the interaction between serialization gadgets and typing9.8 Criticaleap7-wss4j-ws-security-policy-staxRed HatDeserialization of Untrusted Data in jackson-databind9.8 Criticaleap7-wss4j-ws-security-policy-staxRed HatDenial of Service in Cryptacular7.5 Higheap7-wss4j-ws-security-policy-staxRed HatReflected Cross-Site Scripting in Apache CXF6.1 Mediumeap7-wss4j-ws-security-policy-staxRed HatPrivate key leak in Apache CXF7.5 Higheap7-wss4j-ws-security-policy-staxRed HatImproper Restriction of XML External Entity Reference in jackson-mapper-asl5.9 Mediumeap7-wss4j-ws-security-policy-staxRed HatLoop with Unreachable Exit Condition in Apache Thrift7.5 Higheap7-wss4j-ws-security-policy-staxRed HatOut-of-bounds read in Apache Thrift7.5 Higheap7-wss4j-ws-security-policy-staxRed HatAn information disclosure vulnerability was found in JBoss Enterprise Application Platform before...3.5 Loweap7-wss4j-ws-security-policy-staxRed HatIt was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows...7.7 Higheap7-wss4j-ws-security-policy-staxRed HatUndertow Request Smuggling vulnerability2.6 Loweap7-wss4j-ws-security-policy-staxRed HatImproper Limitation of a Pathname to a Restricted Directory in WildFly5.5 Medium- Show moreLoading…