jbossas-core vulnerabilities (Red Hat)
108 vulnerabilities.
-
jbossas-coreRed Hat A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. 8.8 High -
jbossas-coreRed Hat SQL injection in JDBC Appender in Apache Log4j V1 9.8 Critical -
jbossas-coreRed Hat Deserialization of untrusted data in JMSSink in Apache Log4j 1.x 8.8 High -
jbossas-coreRed Hat Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 7.5 High -
jbossas-coreRed Hat A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935... 7.5 High -
jbossas-coreRed Hat Infinite Loop in Apache Tomcat 7.5 High -
jbossas-coreRed Hat Improper Privilege Management in Tomcat 9.8 Critical -
jbossas-coreRed Hat A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential... 5.4 Medium -
jbossas-coreRed Hat JBossWeb Bayeux has reflected XSS 6.1 Medium -
jbossas-coreRed Hat A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions... 5.4 Medium -
jbossas-coreRed Hat An information disclosure vulnerability was found in JBoss Enterprise Application Platform before... 3.5 Low -
jbossas-coreRed Hat Dom4j contains a XML Injection vulnerability 7.5 High -
jbossas-coreRed Hat It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect... 7.8 High -
jbossas-coreRed Hat It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows... 7.7 High -
jbossas-coreRed Hat keycloak-core discloses system properties 6.5 Medium -
jbossas-coreRed Hat The host name verification missing in Apache Tomcat 7.5 High -
jbossas-coreRed Hat In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder 7.5 High -
jbossas-coreRed Hat Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in... 7.0 High -
jbossas-coreRed Hat admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download... 4.3 Medium -
jbossas-coreRed Hat Denial of Service in Google Guava 5.9 Medium -
jbossas-coreRed Hat Improper Access Control in SLF4J 9.8 Critical -
jbossas-coreRed Hat JBoss RESTEasy vulnerable to Improper Input Validation 8.1 High -
jbossas-coreRed Hat Uncontrolled Resource Consumption in Artemis and HornetQ 7.5 High -
jbossas-coreRed Hat Apache Tomcat unauthorized access vulnerability 5.9 Medium -
jbossas-coreRed Hat FasterXML jackson-databind allows unauthenticated remote code execution 9.8 Critical -
jbossas-coreRed Hat A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions... 7.5 High -
jbossas-coreRed Hat jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass 9.8 Critical -
jbossas-coreRed Hat Privilege Escalation in Hibernate Validator 7.0 High -
jbossas-coreRed Hat jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution 9.8 Critical -
jbossas-coreRed Hat Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J 7.5 High -
jbossas-coreRed Hat Unrestricted Upload of File with Dangerous Type Apache Tomcat 8.1 High -
jbossas-coreRed Hat AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.1... 5.9 Medium -
jbossas-coreRed Hat jackson-databind is vulnerable to a deserialization flaw 9.8 Critical -
jbossas-coreRed Hat Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core 7.5 High -
jbossas-coreRed Hat Improper Handling of Exceptional Conditions in Apache Tomcat 7.5 High -
jbossas-coreRed Hat Deserialization of Untrusted Data in Log4j 9.8 Critical -
jbossas-coreRed Hat It was discovered that a programming error in the processing of HTTPS requests in the Apache... 7.5 High -
jbossas-coreRed Hat Improper Input Validation in Apache Tomcat 7.1 High -
jbossas-coreRed Hat Apache Tomcat vulnerable to SecurityManager bypass 7.5 High -
jbossas-coreRed Hat Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat 9.1 Critical -
jbossas-coreRed Hat Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain 7.2 High -
jbossas-coreRed Hat Denial of service in JBoss resteasy 7.5 High -
jbossas-coreRed Hat Improper Input Validation in JGroups 9.8 Critical -
jbossas-coreRed Hat High severity vulnerability that affects commons-fileupload:commons-fileupload 7.5 High -
jbossas-coreRed Hat The HTTPS NIO Connector allows remote attackers to cause a denial of service (thread consumption)... 7.5 High -
jbossas-coreRed Hat Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat 4.3 Medium -
jbossas-coreRed Hat Deserialization of Untrusted Data in Apache commons collections 9.8 Critical -
jbossas-coreRed Hat Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.5 does not properly authorize... 3.5 Low -
jbossas-coreRed Hat The Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly ... 5.0 Medium -
jbossas-coreRed Hat Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat... 6.8 Medium - Show olderLoading…