eap8-wss4j-ws-security-policy-stax vulnerabilities (Red Hat)
14 vulnerabilities.
eap8-wss4j-ws-security-policy-staxRed HatJastow: jastow cross-site scripting attack due to unsanitized uri6.5 Mediumeap8-wss4j-ws-security-policy-staxRed HatApache CXF: Untrusted JMS configuration can lead to RCE9.8 Criticaleap8-wss4j-ws-security-policy-staxRed Hatjose4j is vulnerable to DoS via compressed JWE content7.5 Higheap8-wss4j-ws-security-policy-staxRed HatBouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.7.5 Higheap8-wss4j-ws-security-policy-staxRed HatBouncy Castle crafted signature and public key can be used to trigger an infinite loop7.5 Higheap8-wss4j-ws-security-policy-staxRed HatBouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")5.9 Mediumeap8-wss4j-ws-security-policy-staxRed HatJberet: jberet-core logging database credentials6.5 Mediumeap8-wss4j-ws-security-policy-staxRed HatEap: oidc app attempting to access the second tenant, the user should be prompted to log7.3 Higheap8-wss4j-ws-security-policy-staxRed HatEap: wildfly-elytron has a ssrf security issue7.3 Higheap8-wss4j-ws-security-policy-staxRed HatApache CXF SSRF Vulnerability using the Aegis databinding9.3 Criticaleap8-wss4j-ws-security-policy-staxRed HatEap-galleon: custom provisioning creates unsecured http-invoker6.8 Mediumeap8-wss4j-ws-security-policy-staxRed HatNetty is vulnerable to request smuggling due to incorrect parsing of chunk extensions2.9 Loweap8-wss4j-ws-security-policy-staxRed HatNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 Higheap8-wss4j-ws-security-policy-staxRed HatNetty HttpPostRequestDecoder can OOM5.3 Medium