eap8-opensaml-xmlsec-api vulnerabilities (Red Hat)
10 vulnerabilities.
-
eap8-opensaml-xmlsec-apiRed Hat Jastow: jastow cross-site scripting attack due to unsanitized uri 6.5 Medium -
eap8-opensaml-xmlsec-apiRed Hat Apache CXF: Untrusted JMS configuration can lead to RCE 9.8 Critical -
eap8-opensaml-xmlsec-apiRed Hat jose4j is vulnerable to DoS via compressed JWE content 7.5 High -
eap8-opensaml-xmlsec-apiRed Hat Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. 7.5 High -
eap8-opensaml-xmlsec-apiRed Hat Bouncy Castle crafted signature and public key can be used to trigger an infinite loop 7.5 High -
eap8-opensaml-xmlsec-apiRed Hat Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") 5.9 Medium -
eap8-opensaml-xmlsec-apiRed Hat Apache CXF SSRF Vulnerability using the Aegis databinding 9.3 Critical -
eap8-opensaml-xmlsec-apiRed Hat Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 2.9 Low -
eap8-opensaml-xmlsec-apiRed Hat Netty MadeYouReset HTTP/2 DDoS Vulnerability 8.2 High -
eap8-opensaml-xmlsec-apiRed Hat Netty HttpPostRequestDecoder can OOM 5.3 Medium