eap8-narayana-jbosstxbridge vulnerabilities (Red Hat)
19 vulnerabilities.
eap8-narayana-jbosstxbridgeRed HatJastow: jastow cross-site scripting attack due to unsanitized uri6.5 Mediumeap8-narayana-jbosstxbridgeRed HatApache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default8.8 Higheap8-narayana-jbosstxbridgeRed Hatbase-x homograph attack allows Unicode lookalike characters to bypass validation.8.7 Higheap8-narayana-jbosstxbridgeRed HatOrg.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution6.2 Mediumeap8-narayana-jbosstxbridgeRed HatHAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store4.6 Mediumeap8-narayana-jbosstxbridgeRed HatApache CXF: Denial of Service vulnerability with temporary files5.9 Mediumeap8-narayana-jbosstxbridgeRed HatWithdrawn Advisory: undertow: information leakage via HTTP/2 request header reuse7.5 Higheap8-narayana-jbosstxbridgeRed Hathornetq vulnerable to file overwrite, sensitive information disclosure7.1 Higheap8-narayana-jbosstxbridgeRed HatApache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader4.3 Mediumeap8-narayana-jbosstxbridgeRed HatKeycloak: vulnerable redirect uri validation results in open redirec6.1 Mediumeap8-narayana-jbosstxbridgeRed HatKeycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak7.7 Higheap8-narayana-jbosstxbridgeRed HatApache CXF: Unrestricted memory consumption in CXF HTTP clients7.5 Higheap8-narayana-jbosstxbridgeRed HatWildfly: no timeout for eap management interface may lead to denial of service (dos)4.1 Mediumeap8-narayana-jbosstxbridgeRed HatJberet: jberet-core logging database credentials6.5 Mediumeap8-narayana-jbosstxbridgeRed HatEap: oidc app attempting to access the second tenant, the user should be prompted to log7.3 Higheap8-narayana-jbosstxbridgeRed HatEap: wildfly-elytron has a ssrf security issue7.3 Higheap8-narayana-jbosstxbridgeRed HatDenial of Service in Connect2id Nimbus JOSE+JWT7.5 Higheap8-narayana-jbosstxbridgeRed HatEap-galleon: custom provisioning creates unsecured http-invoker6.8 Mediumeap8-narayana-jbosstxbridgeRed HatApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets7.5 High