eap8-jctools-core vulnerabilities (Red Hat)
25 vulnerabilities.
-
eap8-jctools-coreRed Hat Jastow: jastow cross-site scripting attack due to unsanitized uri 6.5 Medium -
eap8-jctools-coreRed Hat Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion. 8.7 High -
eap8-jctools-coreRed Hat PKIX draft CompositeVerifier accepts empty signature sequence as valid. 6.3 Medium -
eap8-jctools-coreRed Hat Non-constant time comparisons risk private key leakage in FrodoKEM. 8.9 High -
eap8-jctools-coreRed Hat LDAP Injection Vulnerability in LDAPStoreHelper.java 5.5 Medium -
eap8-jctools-coreRed Hat GOSTCTR implementation unable to process more than 255 blocks correctly 9.3 Critical -
eap8-jctools-coreRed Hat Plexus-Utils has a Directory Traversal vulnerability in its extractFile method 8.8 High -
eap8-jctools-coreRed Hat Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation 9.3 Critical -
eap8-jctools-coreRed Hat minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions 7.5 High -
eap8-jctools-coreRed Hat c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property 8.9 High -
eap8-jctools-coreRed Hat mchange-commons-java: Remote Code Execution via JNDI Reference Resolution 8.9 High -
eap8-jctools-coreRed Hat minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern 8.7 High -
eap8-jctools-coreRed Hat XXE vulnerability in Eclipse JGit 6.8 Medium -
eap8-jctools-coreRed Hat Org.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cli 8.1 High -
eap8-jctools-coreRed Hat Withdrawn Advisory: undertow: information leakage via HTTP/2 request header reuse 7.5 High -
eap8-jctools-coreRed Hat hornetq vulnerable to file overwrite, sensitive information disclosure 7.1 High -
eap8-jctools-coreRed Hat Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader 4.3 Medium -
eap8-jctools-coreRed Hat Keycloak: vulnerable redirect uri validation results in open redirec 6.1 Medium -
eap8-jctools-coreRed Hat Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak 7.7 High -
eap8-jctools-coreRed Hat Apache CXF: Unrestricted memory consumption in CXF HTTP clients 7.5 High -
eap8-jctools-coreRed Hat Wildfly: no timeout for eap management interface may lead to denial of service (dos) 4.1 Medium -
eap8-jctools-coreRed Hat Denial of Service in Connect2id Nimbus JOSE+JWT 7.5 High -
eap8-jctools-coreRed Hat Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass 8.7 High -
eap8-jctools-coreRed Hat Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing 7.5 High -
eap8-jctools-coreRed Hat Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets 7.5 High