eap8-activemq-artemis-jakarta-service-extensions vulnerabilities (Red Hat)
79 vulnerabilities.
eap8-activemq-artemis-jakarta-service-extensionsRed HatWildfly-elytron-realm-token: parameter injection in eap's elytron oauth24.2 Mediumeap8-activemq-artemis-jakarta-service-extensionsRed HatOrg.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload5.9 Mediumeap8-activemq-artemis-jakarta-service-extensionsRed HatApache Artemis, Apache ActiveMQ Artemis: Missing Authentication in CORE Protocol Handler Allows Unauthorized Queue Creation7.5 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatApache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Information Disclosure in CORE Protocol Topology Subscription7.5 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatApache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered Peers9.1 Criticaleap8-activemq-artemis-jakarta-service-extensionsRed HatApache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment9.8 Criticaleap8-activemq-artemis-jakarta-service-extensionsRed HatUndertow-core: undertow: denial of service via websocket permessage-deflate processing7.5 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatNetty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass8.7 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatArtemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by default8.8 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatUndertow-core: undertow:http request smuggling via oversized chunk-size bit overlap5.3 Mediumeap8-activemq-artemis-jakarta-service-extensionsRed HatWildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener7.5 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatUndertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method7.5 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatWildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos7.4 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatJboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service7.5 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatUndertow-core: oom via missing limits in chunked trailer in eap's undertow7.5 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatOpenjdk-orb: unauthed class loading via iiop in eap8.1 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatJboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller8.8 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatUndertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery7.4 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatIn Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not...7.5 Higheap8-activemq-artemis-jakarta-service-extensionsRed Hatbrace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation7.5 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatOpenPGP user-attribute subpacket length bounded only by JVM max memory8.7 Higheap8-activemq-artemis-jakarta-service-extensionsRed Hatjackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)8.7 Higheap8-activemq-artemis-jakarta-service-extensionsRed Hatjackson-databind: @JsonView ypassed for @JsonUnwrapped container properties on deserialization6.5 Mediumeap8-activemq-artemis-jakarta-service-extensionsRed HatJastow: jastow cross-site scripting attack due to unsanitized uri6.5 Mediumeap8-activemq-artemis-jakarta-service-extensionsRed Hatjackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation8.1 Higheap8-activemq-artemis-jakarta-service-extensionsRed Hatjackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)8.1 Higheap8-activemq-artemis-jakarta-service-extensionsRed Hatjackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties5.3 Mediumeap8-activemq-artemis-jakarta-service-extensionsRed HatApache CXF: JNDI Injection Vulnerability in JMSConfigFactory8.1 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatApache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils9.8 Criticaleap8-activemq-artemis-jakarta-service-extensionsRed HatApache CXF: Incomplete fix for CVE-2025-48913 (Untrusted JMS configuration can lead to RCE)7.5 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatUnbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.8.7 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatPKIX draft CompositeVerifier accepts empty signature sequence as valid.6.3 Mediumeap8-activemq-artemis-jakarta-service-extensionsRed HatNon-constant time comparisons risk private key leakage in FrodoKEM.8.9 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatLDAP Injection Vulnerability in LDAPStoreHelper.java5.5 Mediumeap8-activemq-artemis-jakarta-service-extensionsRed HatGOSTCTR implementation unable to process more than 255 blocks correctly9.3 Criticaleap8-activemq-artemis-jakarta-service-extensionsRed HatUndertow: undertow: request smuggling via malformed http request headers8.7 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatUndertow: undertow: request smuggling via `\r\r\r` as a header block terminator8.7 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatUndertow: undertow: request smuggling via inconsistent header parsing8.7 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatPlexus-Utils has a Directory Traversal vulnerability in its extractFile method8.8 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatThe Eclipse Jetty Server Artifact has a Gzip request memory leak7.5 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatApache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation9.3 Criticaleap8-activemq-artemis-jakarta-service-extensionsRed Hatminimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions7.5 Higheap8-activemq-artemis-jakarta-service-extensionsRed Hatc3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property8.9 Higheap8-activemq-artemis-jakarta-service-extensionsRed Hatmchange-commons-java: Remote Code Execution via JNDI Reference Resolution8.9 Higheap8-activemq-artemis-jakarta-service-extensionsRed Hatminimatch has a ReDoS via repeated wildcards with non-matching literal in pattern8.7 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatApache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default8.8 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatXXE vulnerability in Eclipse JGit6.8 Mediumeap8-activemq-artemis-jakarta-service-extensionsRed Hatbase-x homograph attack allows Unicode lookalike characters to bypass validation.8.7 Higheap8-activemq-artemis-jakarta-service-extensionsRed HatOrg.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution6.2 Mediumeap8-activemq-artemis-jakarta-service-extensionsRed HatHAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store4.6 Medium- Show moreLoading…