eap8-hal-console vulnerabilities (Red Hat)
34 vulnerabilities.
-
eap8-hal-consoleRed Hat Jastow: jastow cross-site scripting attack due to unsanitized uri 6.5 Medium -
eap8-hal-consoleRed Hat Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion. 8.7 High -
eap8-hal-consoleRed Hat PKIX draft CompositeVerifier accepts empty signature sequence as valid. 6.3 Medium -
eap8-hal-consoleRed Hat Non-constant time comparisons risk private key leakage in FrodoKEM. 8.9 High -
eap8-hal-consoleRed Hat LDAP Injection Vulnerability in LDAPStoreHelper.java 5.5 Medium -
eap8-hal-consoleRed Hat GOSTCTR implementation unable to process more than 255 blocks correctly 9.3 Critical -
eap8-hal-consoleRed Hat Plexus-Utils has a Directory Traversal vulnerability in its extractFile method 8.8 High -
eap8-hal-consoleRed Hat Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation 9.3 Critical -
eap8-hal-consoleRed Hat minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions 7.5 High -
eap8-hal-consoleRed Hat c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property 8.9 High -
eap8-hal-consoleRed Hat mchange-commons-java: Remote Code Execution via JNDI Reference Resolution 8.9 High -
eap8-hal-consoleRed Hat minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern 8.7 High -
eap8-hal-consoleRed Hat Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 8.8 High -
eap8-hal-consoleRed Hat XXE vulnerability in Eclipse JGit 6.8 Medium -
eap8-hal-consoleRed Hat base-x homograph attack allows Unicode lookalike characters to bypass validation. 8.7 High -
eap8-hal-consoleRed Hat Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution 6.2 Medium -
eap8-hal-consoleRed Hat HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store 4.6 Medium -
eap8-hal-consoleRed Hat Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli 8.1 High -
eap8-hal-consoleRed Hat Apache CXF: Denial of Service vulnerability with temporary files 5.9 Medium -
eap8-hal-consoleRed Hat Withdrawn Advisory: undertow: information leakage via HTTP/2 request header reuse 7.5 High -
eap8-hal-consoleRed Hat hornetq vulnerable to file overwrite, sensitive information disclosure 7.1 High -
eap8-hal-consoleRed Hat Wildfly: wildfly vulnerable to cross-site scripting (xss) 6.1 Medium -
eap8-hal-consoleRed Hat jose4j is vulnerable to DoS via compressed JWE content 7.5 High -
eap8-hal-consoleRed Hat Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. 7.5 High -
eap8-hal-consoleRed Hat Bouncy Castle crafted signature and public key can be used to trigger an infinite loop 7.5 High -
eap8-hal-consoleRed Hat Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") 5.9 Medium -
eap8-hal-consoleRed Hat Jberet: jberet-core logging database credentials 6.5 Medium -
eap8-hal-consoleRed Hat Eap: oidc app attempting to access the second tenant, the user should be prompted to log 7.3 High -
eap8-hal-consoleRed Hat Eap: wildfly-elytron has a ssrf security issue 7.3 High -
eap8-hal-consoleRed Hat Apache CXF SSRF Vulnerability using the Aegis databinding 9.3 Critical -
eap8-hal-consoleRed Hat Eap-galleon: custom provisioning creates unsecured http-invoker 6.8 Medium -
eap8-hal-consoleRed Hat Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass 8.7 High -
eap8-hal-consoleRed Hat Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing 7.5 High -
eap8-hal-consoleRed Hat Netty HttpPostRequestDecoder can OOM 5.3 Medium