eap8-narayana-jts-idlj vulnerabilities (Red Hat)
19 vulnerabilities.
eap8-narayana-jts-idljRed HatJastow: jastow cross-site scripting attack due to unsanitized uri6.5 Mediumeap8-narayana-jts-idljRed HatApache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default8.8 Higheap8-narayana-jts-idljRed Hatbase-x homograph attack allows Unicode lookalike characters to bypass validation.8.7 Higheap8-narayana-jts-idljRed HatOrg.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution6.2 Mediumeap8-narayana-jts-idljRed HatHAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store4.6 Mediumeap8-narayana-jts-idljRed HatApache CXF: Denial of Service vulnerability with temporary files5.9 Mediumeap8-narayana-jts-idljRed HatWithdrawn Advisory: undertow: information leakage via HTTP/2 request header reuse7.5 Higheap8-narayana-jts-idljRed Hathornetq vulnerable to file overwrite, sensitive information disclosure7.1 Higheap8-narayana-jts-idljRed HatApache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader4.3 Mediumeap8-narayana-jts-idljRed HatKeycloak: vulnerable redirect uri validation results in open redirec6.1 Mediumeap8-narayana-jts-idljRed HatKeycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak7.7 Higheap8-narayana-jts-idljRed HatApache CXF: Unrestricted memory consumption in CXF HTTP clients7.5 Higheap8-narayana-jts-idljRed HatWildfly: no timeout for eap management interface may lead to denial of service (dos)4.1 Mediumeap8-narayana-jts-idljRed HatJberet: jberet-core logging database credentials6.5 Mediumeap8-narayana-jts-idljRed HatEap: oidc app attempting to access the second tenant, the user should be prompted to log7.3 Higheap8-narayana-jts-idljRed HatEap: wildfly-elytron has a ssrf security issue7.3 Higheap8-narayana-jts-idljRed HatDenial of Service in Connect2id Nimbus JOSE+JWT7.5 Higheap8-narayana-jts-idljRed HatEap-galleon: custom provisioning creates unsecured http-invoker6.8 Mediumeap8-narayana-jts-idljRed HatApache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets7.5 High