eap8-httpcomponents-asyncclient vulnerabilities (Red Hat)
52 vulnerabilities.
-
eap8-httpcomponents-asyncclientRed Hat Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth2 4.2 Medium -
eap8-httpcomponents-asyncclientRed Hat Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload 5.9 Medium -
eap8-httpcomponents-asyncclientRed Hat Apache Artemis, Apache ActiveMQ Artemis: Missing Authentication in CORE Protocol Handler Allows Unauthorized Queue Creation 7.5 High -
eap8-httpcomponents-asyncclientRed Hat Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Information Disclosure in CORE Protocol Topology Subscription 7.5 High -
eap8-httpcomponents-asyncclientRed Hat Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered Peers 9.1 Critical -
eap8-httpcomponents-asyncclientRed Hat Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment 9.8 Critical -
eap8-httpcomponents-asyncclientRed Hat Undertow-core: undertow: denial of service via websocket permessage-deflate processing 7.5 High -
eap8-httpcomponents-asyncclientRed Hat Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass 8.7 High -
eap8-httpcomponents-asyncclientRed Hat Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by default 8.8 High -
eap8-httpcomponents-asyncclientRed Hat Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap 5.3 Medium -
eap8-httpcomponents-asyncclientRed Hat Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener 7.5 High -
eap8-httpcomponents-asyncclientRed Hat Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method 7.5 High -
eap8-httpcomponents-asyncclientRed Hat Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos 7.4 High -
eap8-httpcomponents-asyncclientRed Hat Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service 7.5 High -
eap8-httpcomponents-asyncclientRed Hat Undertow-core: oom via missing limits in chunked trailer in eap's undertow 7.5 High -
eap8-httpcomponents-asyncclientRed Hat Openjdk-orb: unauthed class loading via iiop in eap 8.1 High -
eap8-httpcomponents-asyncclientRed Hat Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller 8.8 High -
eap8-httpcomponents-asyncclientRed Hat Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery 7.4 High -
eap8-httpcomponents-asyncclientRed Hat In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not... 7.5 High -
eap8-httpcomponents-asyncclientRed Hat brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation 7.5 High -
eap8-httpcomponents-asyncclientRed Hat OpenPGP user-attribute subpacket length bounded only by JVM max memory 8.7 High -
eap8-httpcomponents-asyncclientRed Hat jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq) 8.7 High -
eap8-httpcomponents-asyncclientRed Hat jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties on deserialization 6.5 Medium -
eap8-httpcomponents-asyncclientRed Hat Jastow: jastow cross-site scripting attack due to unsanitized uri 6.5 Medium -
eap8-httpcomponents-asyncclientRed Hat jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation 8.1 High -
eap8-httpcomponents-asyncclientRed Hat jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) 8.1 High -
eap8-httpcomponents-asyncclientRed Hat jackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties 5.3 Medium -
eap8-httpcomponents-asyncclientRed Hat Apache CXF: JNDI Injection Vulnerability in JMSConfigFactory 8.1 High -
eap8-httpcomponents-asyncclientRed Hat Apache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils 9.8 Critical -
eap8-httpcomponents-asyncclientRed Hat Apache CXF: Incomplete fix for CVE-2025-48913 (Untrusted JMS configuration can lead to RCE) 7.5 High -
eap8-httpcomponents-asyncclientRed Hat Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion. 8.7 High -
eap8-httpcomponents-asyncclientRed Hat Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 8.8 High -
eap8-httpcomponents-asyncclientRed Hat base-x homograph attack allows Unicode lookalike characters to bypass validation. 8.7 High -
eap8-httpcomponents-asyncclientRed Hat Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution 6.2 Medium -
eap8-httpcomponents-asyncclientRed Hat HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store 4.6 Medium -
eap8-httpcomponents-asyncclientRed Hat Apache CXF: Denial of Service vulnerability with temporary files 5.9 Medium -
eap8-httpcomponents-asyncclientRed Hat jose4j is vulnerable to DoS via compressed JWE content 7.5 High -
eap8-httpcomponents-asyncclientRed Hat Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. 7.5 High -
eap8-httpcomponents-asyncclientRed Hat Bouncy Castle crafted signature and public key can be used to trigger an infinite loop 7.5 High -
eap8-httpcomponents-asyncclientRed Hat Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") 5.9 Medium -
eap8-httpcomponents-asyncclientRed Hat Jberet: jberet-core logging database credentials 6.5 Medium -
eap8-httpcomponents-asyncclientRed Hat Eap: oidc app attempting to access the second tenant, the user should be prompted to log 7.3 High -
eap8-httpcomponents-asyncclientRed Hat Eap: wildfly-elytron has a ssrf security issue 7.3 High -
eap8-httpcomponents-asyncclientRed Hat Apache CXF SSRF Vulnerability using the Aegis databinding 9.3 Critical -
eap8-httpcomponents-asyncclientRed Hat Eap-galleon: custom provisioning creates unsecured http-invoker 6.8 Medium -
eap8-httpcomponents-asyncclientRed Hat Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names 5.3 Medium -
eap8-httpcomponents-asyncclientRed Hat Netty HttpContentEncoder: Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service 6.9 Medium -
eap8-httpcomponents-asyncclientRed Hat Netty has a Security Control Bypass via CORS Short-Circuit Failure 6.5 Medium -
eap8-httpcomponents-asyncclientRed Hat Netty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion 8.7 High -
eap8-httpcomponents-asyncclientRed Hat Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation 7.5 High - Show olderLoading…