javassist vulnerabilities (Red Hat)
98 vulnerabilities.
javassistRed HatForeman before 1.9.0 allows remote authenticated users with the edit_users permission to edit...6.0 MediumjavassistRed HatForeman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,...5.0 MediumjavassistRed HatForeman before 1.7.5 allows remote authenticated users to bypass organization and location...4.0 MediumjavassistRed HatForman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in...5.0 MediumjavassistRed HatCross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1...4.3 MediumjavassistRed HatCross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before...3.5 LowjavassistRed HatMultiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN)...3.5 LowjavassistRed HatSimpleGeo python-oauth2 does not check the nonce allowing replay attacks4.3 MediumjavassistRed HatSimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces5.8 MediumjavassistRed HatThe AuthorizationInterceptor in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web...4.9 MediumjavassistRed HatThe SecurityAssociation.getCredential method in JBoss Enterprise Application Platform (EAP)...5.8 MediumjavassistRed HatThe CallerIdentityLoginModule in JBoss Enterprise Application Platform (EAP) before 5.2.0, Web...4.0 MediumjavassistRed HatThe (1) JMXInvokerHAServlet and (2) EJBInvokerHAServlet invoker servlets in JBoss Enterprise...6.8 MediumjavassistRed HatThe NonManagedConnectionFactory in JBoss Enterprise Application Platform (EAP) 5.1.2 and 5.2.0,...2.1 LowjavassistRed HatCross-site scripting (XSS) vulnerability in the JMX console in JBoss Enterprise Application...4.3 MediumjavassistRed HatJboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypass5.3 MediumjavassistRed HatJboss enterprise application platform: org.jboss.as.ejb3: jboss enterprise application platform: access restriction bypass via improper ejb method authorization6.5 MediumjavassistRed HatImproper Authentication in Apache CXF4.3 MediumjavassistRed HatXML Signature/Encryption Not Validated in Apache CXF10.0 HighjavassistRed HatUser confusion in IronJacamar4.3 MediumjavassistRed HatAuthentication Bypass in Apache Tomcat4.3 MediumjavassistRed HatThe mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node...5.0 MediumjavassistRed HatJGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before...3.3 LowjavassistRed HatCross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss...6.0 MediumjavassistRed HatThe W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss...5.0 MediumjavassistRed HatRemote web-service operation execution in Apache CXF4.3 MediumjavassistRed HatMultiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in...2.6 LowjavassistRed Hattwiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments,...2.1 LowjavassistRed HatImproper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework7.5 HighjavassistRed HatOracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup,...2.1 LowjavassistRed Hatjboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss...6.8 MediumjavassistRed HatStack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache...4.3 MediumjavassistRed HatImproper Neutralization of Input During Web Page Generation in Apache Tomcat4.3 MediumjavassistRed HatImproper Limitation of a Pathname to a Restricted Directory in Apache Tomcat1.2 LowjavassistRed HatCross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise...4.3 MediumjavassistRed HatThe org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run...2.6 LowjavassistRed HatDrools Improper Input Validation vulnerability allows remote attackers to execute arbitrary code in JBoss EAP7.5 HighjavassistRed HatImproper Neutralization of Input During Web Page Generation in Apache Tomcat4.3 MediumjavassistRed HatMemory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache...5.0 MediumjavassistRed HatThe (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow...5.0 MediumjavassistRed HatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat2.6 LowjavassistRed HatThe default configuration of the JBossAs component in Red Hat JBoss Enterprise Application...4.3 MediumjavassistRed HatJBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4...5.0 MediumjavassistRed HatCross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server...4.3 MediumjavassistRed HatJULI logging component in Apache Tomcat does not restrict certain permissions for web applications6.4 Medium