hibernate4-entitymanager-eap6 vulnerabilities (Red Hat)
50 vulnerabilities.
-
hibernate4-entitymanager-eap6Red Hat JBoss RESTEasy vulnerable to Improper Input Validation 8.1 High -
hibernate4-entitymanager-eap6Red Hat Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J 7.5 High -
hibernate4-entitymanager-eap6Red Hat jackson-databind is vulnerable to a deserialization flaw 9.8 Critical -
hibernate4-entitymanager-eap6Red Hat Improper Handling of Exceptional Conditions in Apache Tomcat 7.5 High -
hibernate4-entitymanager-eap6Red Hat Deserialization of Untrusted Data in Log4j 9.8 Critical -
hibernate4-entitymanager-eap6Red Hat Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat 7.5 High -
hibernate4-entitymanager-eap6Red Hat Apache Tomcat Improper Access Control vulnerability 9.8 Critical -
hibernate4-entitymanager-eap6Red Hat Improper Input Validation in Apache Tomcat 7.1 High -
hibernate4-entitymanager-eap6Red Hat Incorrect Authorization in Apache Tomcat 7.5 High -
hibernate4-entitymanager-eap6Red Hat Apache Tomcat vulnerable to SecurityManager bypass 7.5 High -
hibernate4-entitymanager-eap6Red Hat System Property Disclosure in Apache Tomcat 5.3 Medium -
hibernate4-entitymanager-eap6Red Hat Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat 9.1 Critical -
hibernate4-entitymanager-eap6Red Hat Observable Discrepancy in Apache Tomcat 5.9 Medium -
hibernate4-entitymanager-eap6Red Hat The Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and... 7.8 High -
hibernate4-entitymanager-eap6Red Hat The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8... 7.8 High -
hibernate4-entitymanager-eap6Red Hat High severity vulnerability that affects commons-fileupload:commons-fileupload 7.5 High -
hibernate4-entitymanager-eap6Red Hat Deserialization of Untrusted Data in Apache commons collections 9.8 Critical -
hibernate4-entitymanager-eap6Red Hat Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.5 does not properly authorize... 3.5 Low -
hibernate4-entitymanager-eap6Red Hat PicketLink does not properly check role based authorization 4.0 Medium -
hibernate4-entitymanager-eap6Red Hat Cross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2... 4.3 Medium -
hibernate4-entitymanager-eap6Red Hat The (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not... 6.0 Medium -
hibernate4-entitymanager-eap6Red Hat The Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an... 6.0 Medium -
hibernate4-entitymanager-eap6Red Hat Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous... 5.0 Medium -
hibernate4-entitymanager-eap6Red Hat The default configuration for the Command Line Interface in Red Hat Enterprise Application... 2.1 Low -
hibernate4-entitymanager-eap6Red Hat XXE in Apache Standard Taglibs 7.5 High -
hibernate4-entitymanager-eap6Red Hat Information disclosure in JBoss Weld 4.3 Medium -
hibernate4-entitymanager-eap6Red Hat The JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application... 4.0 Medium -
hibernate4-entitymanager-eap6Red Hat The Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP... 4.0 Medium -
hibernate4-entitymanager-eap6Red Hat The org.jboss.security.plugins.mapping.JBossMappingManager implementation in JBoss Security in... 3.5 Low -
hibernate4-entitymanager-eap6Red Hat Improper Access Control in Apache WSS4J 5.0 Medium -
hibernate4-entitymanager-eap6Red Hat XML External Entity Reference in RESTEasy 6.4 Medium -
hibernate4-entitymanager-eap6Red Hat JBoss SX and PicketBox, as used in Red Hat JBoss Enterprise Application Platform (EAP) before 6.2... 2.1 Low -
hibernate4-entitymanager-eap6Red Hat Improper Authentication in Hibernate Validator 5.0 Medium -
hibernate4-entitymanager-eap6Red Hat The isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used... 4.9 Medium -
hibernate4-entitymanager-eap6Red Hat The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise... 5.5 Medium -
hibernate4-entitymanager-eap6Red Hat The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,... 5.0 Medium -
hibernate4-entitymanager-eap6Red Hat Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote... 6.8 Medium -
hibernate4-entitymanager-eap6Red Hat The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP... 4.3 Medium -
hibernate4-entitymanager-eap6Red Hat org.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application... 5.0 Medium -
hibernate4-entitymanager-eap6Red Hat Cleartext Transmission of Sensitive Information in Apache CXF 4.3 Medium -
hibernate4-entitymanager-eap6Red Hat Improper Input Validation in Apache CXF 4.3 Medium -
hibernate4-entitymanager-eap6Red Hat Missing XML Validation in Apache Tomcat 4.3 Medium -
hibernate4-entitymanager-eap6Red Hat Uncontrolled Resource Consumption in Apache CXF 4.3 Medium -
hibernate4-entitymanager-eap6Red Hat Uncontrolled Resource Consumption in Apache CXF 4.3 Medium -
hibernate4-entitymanager-eap6Red Hat Netty denial of service vulnerability 5.0 Medium -
hibernate4-entitymanager-eap6Red Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat 4.3 Medium -
hibernate4-entitymanager-eap6Red Hat The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise... 5.5 Medium -
hibernate4-entitymanager-eap6Red Hat Improper Control of Generation of Code in HawtJNI 4.4 Medium -
hibernate4-entitymanager-eap6Red Hat Improper Input Validation in Apache Tomcat 6.4 Medium -
hibernate4-entitymanager-eap6Red Hat Missing XML Validation in Apache Xerces2 7.1 High