eap8-apache-sshd vulnerabilities (Red Hat)
15 vulnerabilities.
-
eap8-apache-sshdRed Hat Jastow: jastow cross-site scripting attack due to unsanitized uri 6.5 Medium -
eap8-apache-sshdRed Hat jose4j is vulnerable to DoS via compressed JWE content 7.5 High -
eap8-apache-sshdRed Hat Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. 7.5 High -
eap8-apache-sshdRed Hat Bouncy Castle crafted signature and public key can be used to trigger an infinite loop 7.5 High -
eap8-apache-sshdRed Hat Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") 5.9 Medium -
eap8-apache-sshdRed Hat Jberet: jberet-core logging database credentials 6.5 Medium -
eap8-apache-sshdRed Hat Eap: oidc app attempting to access the second tenant, the user should be prompted to log 7.3 High -
eap8-apache-sshdRed Hat Eap: wildfly-elytron has a ssrf security issue 7.3 High -
eap8-apache-sshdRed Hat Apache CXF SSRF Vulnerability using the Aegis databinding 9.3 Critical -
eap8-apache-sshdRed Hat Eap-galleon: custom provisioning creates unsecured http-invoker 6.8 Medium -
eap8-apache-sshdRed Hat Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
eap8-apache-sshdRed Hat Parsson DoS when parsing numbers from untrusted sources 5.9 Medium -
eap8-apache-sshdRed Hat Netty HttpPostRequestDecoder can OOM 5.3 Medium -
eap8-apache-sshdRed Hat Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write 8.8 High -
eap8-apache-sshdRed Hat Apache MINA SSHD: Information disclosure bugs with RootedFilesystem 5.0 Medium