eap8-wildfly-java-jdk11 vulnerabilities (Red Hat)
42 vulnerabilities.
-
eap8-wildfly-java-jdk11Red Hat Apache CXF: Untrusted JMS configuration can lead to RCE 9.8 Critical -
eap8-wildfly-java-jdk11Red Hat Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default 8.8 High -
eap8-wildfly-java-jdk11Red Hat XXE vulnerability in Eclipse JGit 6.8 Medium -
eap8-wildfly-java-jdk11Red Hat base-x homograph attack allows Unicode lookalike characters to bypass validation. 8.7 High -
eap8-wildfly-java-jdk11Red Hat Org.jboss.eap:wildfly-ejb3: improper deserialization in jboss marshalling allows remote code execution 6.2 Medium -
eap8-wildfly-java-jdk11Red Hat HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store 4.6 Medium -
eap8-wildfly-java-jdk11Red Hat Org.wildfly.core:wildfly-server: wildfly improper rbac permission 6.5 Medium -
eap8-wildfly-java-jdk11Red Hat Apache CXF: Denial of Service vulnerability with temporary files 5.9 Medium -
eap8-wildfly-java-jdk11Red Hat Narayana: deadlock via multiple join requests sent to lra coordinator 5.9 Medium -
eap8-wildfly-java-jdk11Red Hat Withdrawn Advisory: undertow: information leakage via HTTP/2 request header reuse 7.5 High -
eap8-wildfly-java-jdk11Red Hat Elytron-oidc-client: oidc authorization code injection 4.2 Medium -
eap8-wildfly-java-jdk11Red Hat hornetq vulnerable to file overwrite, sensitive information disclosure 7.1 High -
eap8-wildfly-java-jdk11Red Hat Wildfly: wildfly vulnerable to cross-site scripting (xss) 6.1 Medium -
eap8-wildfly-java-jdk11Red Hat Apache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader 4.3 Medium -
eap8-wildfly-java-jdk11Red Hat jose4j is vulnerable to DoS via compressed JWE content 7.5 High -
eap8-wildfly-java-jdk11Red Hat Keycloak: vulnerable redirect uri validation results in open redirec 6.1 Medium -
eap8-wildfly-java-jdk11Red Hat Keycloak-saml-core: improper verification of saml responses leading to privilege escalation in keycloak 7.7 High -
eap8-wildfly-java-jdk11Red Hat Undertow: improper state management in proxy protocol parsing causes information leakage 7.5 High -
eap8-wildfly-java-jdk11Red Hat Apache CXF: Unrestricted memory consumption in CXF HTTP clients 7.5 High -
eap8-wildfly-java-jdk11Red Hat Bouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation. 7.5 High -
eap8-wildfly-java-jdk11Red Hat Bouncy Castle crafted signature and public key can be used to trigger an infinite loop 7.5 High -
eap8-wildfly-java-jdk11Red Hat Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") 5.9 Medium -
eap8-wildfly-java-jdk11Red Hat Wildfly: no timeout for eap management interface may lead to denial of service (dos) 4.1 Medium -
eap8-wildfly-java-jdk11Red Hat Jberet: jberet-core logging database credentials 6.5 Medium -
eap8-wildfly-java-jdk11Red Hat Eap: oidc app attempting to access the second tenant, the user should be prompted to log 7.3 High -
eap8-wildfly-java-jdk11Red Hat Eap: wildfly-elytron has a ssrf security issue 7.3 High -
eap8-wildfly-java-jdk11Red Hat Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames 7.5 High -
eap8-wildfly-java-jdk11Red Hat Apache CXF SSRF Vulnerability using the Aegis databinding 9.3 Critical -
eap8-wildfly-java-jdk11Red Hat Denial of Service in Connect2id Nimbus JOSE+JWT 7.5 High -
eap8-wildfly-java-jdk11Red Hat Eap-galleon: custom provisioning creates unsecured http-invoker 6.8 Medium -
eap8-wildfly-java-jdk11Red Hat Ion Java StackOverflow vulnerability 7.5 High -
eap8-wildfly-java-jdk11Red Hat Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
eap8-wildfly-java-jdk11Red Hat Parsson DoS when parsing numbers from untrusted sources 5.9 Medium -
eap8-wildfly-java-jdk11Red Hat Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions 2.9 Low -
eap8-wildfly-java-jdk11Red Hat Netty MadeYouReset HTTP/2 DDoS Vulnerability 8.2 High -
eap8-wildfly-java-jdk11Red Hat Denial of Service attack on windows app using Netty 5.5 Medium -
eap8-wildfly-java-jdk11Red Hat SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine 7.5 High -
eap8-wildfly-java-jdk11Red Hat Denial of Service attack on windows app using Netty 5.5 Medium -
eap8-wildfly-java-jdk11Red Hat Netty HttpPostRequestDecoder can OOM 5.3 Medium -
eap8-wildfly-java-jdk11Red Hat Improper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write 8.8 High -
eap8-wildfly-java-jdk11Red Hat Apache MINA SSHD: Information disclosure bugs with RootedFilesystem 5.0 Medium -
eap8-wildfly-java-jdk11Red Hat Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets 7.5 High