eap8-apache-commons-codec vulnerabilities (Red Hat)
18 vulnerabilities.
-
eap8-apache-commons-codecRed Hat Jastow: jastow cross-site scripting attack due to unsanitized uri 6.5 Medium -
eap8-apache-commons-codecRed Hat Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader 4.3 Medium -
eap8-apache-commons-codecRed Hat jose4j is vulnerable to DoS via compressed JWE content 7.5 High -
eap8-apache-commons-codecRed Hat Keycloak: vulnerable redirect uri validation results in open redirec 6.1 Medium -
eap8-apache-commons-codecRed Hat Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak 7.7 High -
eap8-apache-commons-codecRed Hat Apache CXF: Unrestricted memory consumption in CXF HTTP clients 7.5 High -
eap8-apache-commons-codecRed Hat Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. 7.5 High -
eap8-apache-commons-codecRed Hat Bouncy Castle crafted signature and public key can be used to trigger an infinite loop 7.5 High -
eap8-apache-commons-codecRed Hat Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") 5.9 Medium -
eap8-apache-commons-codecRed Hat Wildfly: no timeout for eap management interface may lead to denial of service (dos) 4.1 Medium -
eap8-apache-commons-codecRed Hat Jberet: jberet-core logging database credentials 6.5 Medium -
eap8-apache-commons-codecRed Hat Eap: oidc app attempting to access the second tenant, the user should be prompted to log 7.3 High -
eap8-apache-commons-codecRed Hat Eap: wildfly-elytron has a ssrf security issue 7.3 High -
eap8-apache-commons-codecRed Hat Apache CXF SSRF Vulnerability using the Aegis databinding 9.3 Critical -
eap8-apache-commons-codecRed Hat Denial of Service in Connect2id Nimbus JOSE+JWT 7.5 High -
eap8-apache-commons-codecRed Hat Eap-galleon: custom provisioning creates unsecured http-invoker 6.8 Medium -
eap8-apache-commons-codecRed Hat Netty HttpPostRequestDecoder can OOM 5.3 Medium -
eap8-apache-commons-codecRed Hat Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets 7.5 High