eap7-xml-security vulnerabilities (Red Hat)

78 vulnerabilities.

• eap7-xml-security Red Hat hornetq vulnerable to file overwrite, sensitive information disclosure CVE-2024-51127 Fix available 7.1 HighNovember 4, 2024
• eap7-xml-security Red Hat Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK) CVE-2024-47561 Fix available 9.2 CriticalOctober 3, 2024
• eap7-xml-security Red Hat Undertow: unrestricted request storage leads to memory exhaustion CVE-2023-1973 Fix available 7.5 HighSeptember 27, 2024
• eap7-xml-security Red Hat Eap: wildfly-elytron has a ssrf security issue CVE-2024-1233 7.3 HighApril 9, 2024
• eap7-xml-security Red Hat Xnio: stackoverflowexception when the chain of notifier states becomes problematically big CVE-2023-5685 Fix available 7.5 HighMarch 22, 2024
• eap7-xml-security Red Hat Apache CXF SSRF Vulnerability using the Aegis databinding CVE-2024-28752 Public exploitFix available 9.3 CriticalMarch 15, 2024
• eap7-xml-security Red Hat Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol CVE-2024-1635 Fix available 7.5 HighFebruary 19, 2024
• eap7-xml-security Red Hat Eap-7: heap exhaustion via deserialization CVE-2023-3171 7.5 HighDecember 27, 2023
• eap7-xml-security Red Hat Apache Santuario: Private Key disclosure in debug-log output CVE-2023-44483 Fix available 6.5 MediumOctober 20, 2023
• eap7-xml-security Red Hat Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK CVE-2023-39410 Fix available 7.5 HighSeptember 29, 2023
• eap7-xml-security Red Hat Undertow: outofmemoryerror due to @multipartconfig handling CVE-2023-3223 Fix available 7.5 HighSeptember 27, 2023
• eap7-xml-security Red Hat Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write CVE-2023-4759 Fix available 8.8 HighSeptember 12, 2023
• eap7-xml-security Red Hat Undertow: infinite loop in sslconduit during close CVE-2023-1108 Fix available 7.5 HighApril 7, 2023
• eap7-xml-security Red Hat Apache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender CVE-2023-26464 Fix available 7.5 HighMarch 10, 2023
• eap7-xml-security Red Hat Apache CXF SSRF Vulnerability CVE-2022-46364 Public exploitFix available 9.8 CriticalDecember 13, 2022
• eap7-xml-security Red Hat Remote code execution in HyperSQL DataBase CVE-2022-41853 Public exploitFix available 8.0 HighOctober 6, 2022
• eap7-xml-security Red Hat Stack Buffer Overflow in Woodstox CVE-2022-40152 Fix available EPSS 18.2% 6.5 MediumSeptember 16, 2022
• eap7-xml-security Red Hat Stack Buffer Overflow in Jettison CVE-2022-40149 Fix available 6.5 MediumSeptember 16, 2022
• eap7-xml-security Red Hat A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response... CVE-2022-1319 Fix available 7.5 HighAugust 31, 2022
• eap7-xml-security Red Hat Denial of Service (DoS) CVE-2022-25857 Fix available 7.5 HighAugust 30, 2022
• eap7-xml-security Red Hat XNIO `notifyReadClosed` method logging message to unexpected end CVE-2022-0084 Fix available 7.5 HighAugust 26, 2022
• eap7-xml-security Red Hat Undertow vulnerable to Dos via Large AJP request CVE-2022-2053 Fix available 7.5 HighAugust 5, 2022
• eap7-xml-security Red Hat Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets CVE-2022-34169 Public exploitFix available EPSS 81.8% 7.5 HighJuly 19, 2022
• eap7-xml-security Red Hat Undertow vulnerable to Denial of Service (DoS) attacks CVE-2021-3859 Fix available 7.5 HighJuly 15, 2022
• eap7-xml-security Red Hat Undertow vulnerable to memory exhaustion due to buffer leak CVE-2021-3690 Fix available 7.5 HighJuly 15, 2022
• eap7-xml-security Red Hat Undertow Uncontrolled Resource Consumption CVE-2021-3629 Fix available 5.9 MediumMay 24, 2022
• eap7-xml-security Red Hat Wildfly-Core user account mismanagement CVE-2021-3717 Fix available 7.8 HighMay 24, 2022
• eap7-xml-security Red Hat Local Information Disclosure Vulnerability in io.netty:netty-codec-http CVE-2022-24823 Fix available 5.5 MediumMay 6, 2022
• eap7-xml-security Red Hat Deserialization of Untrusted Data CVE-2022-25647 Fix available EPSS 12.2% 7.7 HighMay 1, 2022
• eap7-xml-security Red Hat Path Traversal in Moment.js CVE-2022-24785 Public exploitFix available EPSS 13.8% 7.5 HighApril 4, 2022
• eap7-xml-security Red Hat Prototype Pollution in minimist CVE-2021-44906 Public exploitFix available 9.8 CriticalMarch 17, 2022
• eap7-xml-security Red Hat Apache ActiveMQ Artemis DoS CVE-2022-23913 Fix available 7.5 HighFebruary 4, 2022
• eap7-xml-security Red Hat Arbitrary code execution in H2 Console CVE-2022-23221 Public exploitFix available EPSS 64.8% 9.8 CriticalJanuary 19, 2022
• eap7-xml-security Red Hat A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• eap7-xml-security Red Hat SQL injection in JDBC Appender in Apache Log4j V1 CVE-2022-23305 Public exploitFix available EPSS 66.5% 9.8 CriticalJanuary 18, 2022
• eap7-xml-security Red Hat Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• eap7-xml-security Red Hat Cross-site Scripting (XSS) CVE-2021-23445 Fix available 3.1 LowSeptember 27, 2021
• eap7-xml-security Red Hat Bypass of the secureValidation property CVE-2021-40690 Fix available 7.5 HighSeptember 19, 2021
• eap7-xml-security Red Hat Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions CVE-2021-37714 Fix available 7.5 HighAugust 18, 2021
• eap7-xml-security Red Hat Observable Discrepancy in Wildfly Elytron CVE-2021-3642 Fix available 5.3 MediumAugust 5, 2021
• eap7-xml-security Red Hat Exposure of class information in RESTEasy CVE-2021-20289 Fix available 5.3 MediumMarch 26, 2021
• eap7-xml-security Red Hat Inadequate Encryption Strength and Algorithm Downgrade in Wildfly CVE-2019-14887 7.4 HighMarch 16, 2020
• eap7-xml-security Red Hat HTTP Request Smuggling in Netty CVE-2019-20444 Fix available 9.1 CriticalJanuary 29, 2020
• eap7-xml-security Red Hat HTTP Request Smuggling in Netty CVE-2019-20445 Fix available EPSS 13.8% 9.1 CriticalJanuary 29, 2020
• eap7-xml-security Red Hat HTTP Request Smuggling in Netty CVE-2020-7238 Fix available 7.5 HighJanuary 27, 2020
• eap7-xml-security Red Hat Loop with Unreachable Exit Condition in Apache Thrift CVE-2019-0205 Public exploitFix available 7.5 HighOctober 28, 2019
• eap7-xml-security Red Hat Out-of-bounds read in Apache Thrift CVE-2019-0210 Fix available 7.5 HighOctober 28, 2019
• eap7-xml-security Red Hat Improper input validation in Apache Santuario XML Security for Java CVE-2019-12400 Fix available 5.5 MediumAugust 23, 2019
• eap7-xml-security Red Hat Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019
• eap7-xml-security Red Hat An information disclosure vulnerability was found in JBoss Enterprise Application Platform before... CVE-2016-7061 3.5 LowSeptember 10, 2018
• Show olderLoading…