jbossas-core vulnerabilities (Red Hat)
108 vulnerabilities.
jbossas-coreRed HatThe Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly ...4.3 Mediumjbossas-coreRed HatPicketLink does not properly check role based authorization4.0 Mediumjbossas-coreRed HatCross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2...4.3 Mediumjbossas-coreRed HatThe (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not...6.0 Mediumjbossas-coreRed HatThe Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an...6.0 Mediumjbossas-coreRed HatApache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous...5.0 Mediumjbossas-coreRed HatThe default configuration for the Command Line Interface in Red Hat Enterprise Application...2.1 Lowjbossas-coreRed HatXXE in Apache Standard Taglibs7.5 Highjbossas-coreRed HatPicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and...3.6 Lowjbossas-coreRed HatInformation disclosure in JBoss Weld4.3 Mediumjbossas-coreRed HatThe JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application...4.0 Mediumjbossas-coreRed HatThe Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP...4.0 Mediumjbossas-coreRed HatThe org.jboss.security.plugins.mapping.JBossMappingManager implementation in JBoss Security in...3.5 Lowjbossas-coreRed HatImproper Access Control in Apache WSS4J5.0 Mediumjbossas-coreRed HatXML External Entity Reference in RESTEasy6.4 Mediumjbossas-coreRed HatJBoss SX and PicketBox, as used in Red Hat JBoss Enterprise Application Platform (EAP) before 6.2...2.1 Lowjbossas-coreRed HatImproper Authentication in Hibernate Validator5.0 Mediumjbossas-coreRed HatThe isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used...4.9 Mediumjbossas-coreRed HatThe EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise...5.5 Mediumjbossas-coreRed HatThe mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,...5.0 Mediumjbossas-coreRed HatRace condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote...6.8 Mediumjbossas-coreRed HatThe deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP...4.3 Mediumjbossas-coreRed Hatorg.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application...5.0 Mediumjbossas-coreRed HatCleartext Transmission of Sensitive Information in Apache CXF4.3 Mediumjbossas-coreRed HatImproper Input Validation in Apache CXF4.3 Mediumjbossas-coreRed HatUncontrolled Resource Consumption in Apache CXF4.3 Mediumjbossas-coreRed HatUncontrolled Resource Consumption in Apache CXF4.3 Mediumjbossas-coreRed HatNetty denial of service vulnerability5.0 Mediumjbossas-coreRed HatRed Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager ...5.8 Mediumjbossas-coreRed HatApache Tomcat is vulnerable to HTTP request-smuggling5.8 Mediumjbossas-coreRed HatRed Hat JBoss Enterprise Application Platform (JBEAP) 6.2.0 and JBoss WildFly Application Server,...1.9 Lowjbossas-coreRed HatExposure of Sensitive Information to an Unauthorized Actor in OpenSAML5.0 Mediumjbossas-coreRed HatImproper Input Validation in Apache Santuario XML Security4.3 Mediumjbossas-coreRed HatThe EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise...5.5 Mediumjbossas-coreRed HatRed Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0...3.7 Lowjbossas-coreRed HatThe org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and...4.3 Mediumjbossas-coreRed HatExposure of Sensitive Information to an Unauthorized Actor in JGroup5.4 Mediumjbossas-coreRed HatPicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local...1.9 Lowjbossas-coreRed HatImproper Control of Generation of Code in HawtJNI4.4 Mediumjbossas-coreRed HatInefficient Algorithmic Complexity in Apache Santuario XML Security4.3 Mediumjbossas-coreRed HatInadequate Encryption Strength in Apache CXF6.4 Mediumjbossas-coreRed HatUncontrolled Resource Consumption in Apache Tomcat7.8 Highjbossas-coreRed HatImproper Input Validation in Apache Tomcat6.4 Mediumjbossas-coreRed HatMissing XML Validation in Apache Xerces27.1 Highjbossas-coreRed Hatmod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is...4.3 Mediumjbossas-coreRed Hatmod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data...5.1 Mediumjbossas-coreRed HatImproper Authentication in Apache Tomcat6.8 Mediumjbossas-coreRed HatMultiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the...4.3 Mediumjbossas-coreRed HatMultiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24...4.3 Mediumjbossas-coreRed HatJboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypass5.3 Medium- Show moreLoading…