jbossas-modules-eap vulnerabilities (Red Hat)

108 vulnerabilities.

• jbossas-modules-eap Red Hat A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• jbossas-modules-eap Red Hat SQL injection in JDBC Appender in Apache Log4j V1 CVE-2022-23305 Public exploitFix available EPSS 66.5% 9.8 CriticalJanuary 18, 2022
• jbossas-modules-eap Red Hat Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVE-2022-23302 Fix available EPSS 63.8% 8.8 HighJanuary 18, 2022
• jbossas-modules-eap Red Hat Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• jbossas-modules-eap Red Hat A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935... CVE-2020-14384 Fix available 7.5 HighSeptember 9, 2020
• jbossas-modules-eap Red Hat Infinite Loop in Apache Tomcat CVE-2020-13935 Public exploitFix available EPSS 86.6% 7.5 HighJuly 14, 2020
• jbossas-modules-eap Red Hat Improper Privilege Management in Tomcat CVE-2020-1938 In KEVPublic exploitFix available EPSS 99.3% 9.8 CriticalFebruary 24, 2020
• jbossas-modules-eap Red Hat A flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential... CVE-2019-14885 Fix available 5.4 MediumJanuary 23, 2020
• jbossas-modules-eap Red Hat JBossWeb Bayeux has reflected XSS CVE-2013-6495 6.1 MediumDecember 11, 2019
• jbossas-modules-eap Red Hat A cross-site scripting (XSS) vulnerability was found in the JBoss Management Console versions... CVE-2018-10934 5.4 MediumMarch 27, 2019
• jbossas-modules-eap Red Hat An information disclosure vulnerability was found in JBoss Enterprise Application Platform before... CVE-2016-7061 3.5 LowSeptember 10, 2018
• jbossas-modules-eap Red Hat Dom4j contains a XML Injection vulnerability CVE-2018-1000632 Fix available 7.5 HighAugust 20, 2018
• jbossas-modules-eap Red Hat It was discovered that EAP packages in certain versions of Red Hat Enterprise Linux use incorrect... CVE-2016-8657 7.8 HighJuly 31, 2018
• jbossas-modules-eap Red Hat It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows... CVE-2017-2595 7.7 HighJuly 27, 2018
• jbossas-modules-eap Red Hat keycloak-core discloses system properties CVE-2017-2582 Fix available 6.5 MediumJuly 26, 2018
• jbossas-modules-eap Red Hat The host name verification missing in Apache Tomcat CVE-2018-8034 Fix available EPSS 21.0% 7.5 HighJuly 24, 2018
• jbossas-modules-eap Red Hat In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder CVE-2018-1336 Fix available EPSS 20.4% 7.5 HighJuly 24, 2018
• jbossas-modules-eap Red Hat Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in... CVE-2016-8656 7.0 HighMay 22, 2018
• jbossas-modules-eap Red Hat admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download... CVE-2016-8627 4.3 MediumMay 11, 2018
• jbossas-modules-eap Red Hat Denial of Service in Google Guava CVE-2018-10237 Fix available 5.9 MediumApril 26, 2018
• jbossas-modules-eap Red Hat Improper Access Control in SLF4J CVE-2018-8088 Fix available EPSS 14.7% 9.8 CriticalMarch 20, 2018
• jbossas-modules-eap Red Hat JBoss RESTEasy vulnerable to Improper Input Validation CVE-2016-9606 Fix available 8.1 HighMarch 9, 2018
• jbossas-modules-eap Red Hat Uncontrolled Resource Consumption in Artemis and HornetQ CVE-2017-12174 Fix available 7.5 HighMarch 7, 2018
• jbossas-modules-eap Red Hat Apache Tomcat unauthorized access vulnerability CVE-2018-1304 Public exploitFix available EPSS 17.1% 5.9 MediumFebruary 28, 2018
• jbossas-modules-eap Red Hat FasterXML jackson-databind allows unauthenticated remote code execution CVE-2018-7489 Public exploitFix available EPSS 19.8% 9.8 CriticalFebruary 26, 2018
• jbossas-modules-eap Red Hat A vulnerability was found in the way RemoteMessageChannel, introduced in jboss-remoting versions... CVE-2018-1041 Public exploit EPSS 15.5% 7.5 HighFebruary 15, 2018
• jbossas-modules-eap Red Hat jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass CVE-2017-17485 Public exploitFix available EPSS 49.7% 9.8 CriticalJanuary 10, 2018
• jbossas-modules-eap Red Hat Privilege Escalation in Hibernate Validator CVE-2017-7536 Fix available 7.0 HighJanuary 10, 2018
• jbossas-modules-eap Red Hat jackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code execution CVE-2017-15095 Fix available 9.8 CriticalNovember 16, 2017
• jbossas-modules-eap Red Hat Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J CVE-2015-0226 Fix available 7.5 HighOctober 30, 2017
• jbossas-modules-eap Red Hat Unrestricted Upload of File with Dangerous Type Apache Tomcat CVE-2017-12617 In KEVPublic exploitFix available EPSS 100.0% 8.1 HighOctober 3, 2017
• jbossas-modules-eap Red Hat AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.1... CVE-2015-1849 Fix available 5.9 MediumSeptember 19, 2017
• jbossas-modules-eap Red Hat jackson-databind is vulnerable to a deserialization flaw CVE-2017-7525 Public exploitFix available EPSS 37.7% 9.8 CriticalAugust 11, 2017
• jbossas-modules-eap Red Hat Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core CVE-2017-3163 Fix available 7.5 HighJuly 30, 2017
• jbossas-modules-eap Red Hat Improper Handling of Exceptional Conditions in Apache Tomcat CVE-2017-5664 Fix available EPSS 16.6% 7.5 HighJune 6, 2017
• jbossas-modules-eap Red Hat Deserialization of Untrusted Data in Log4j CVE-2017-5645 Public exploitFix available EPSS 89.4% 9.8 CriticalApril 17, 2017
• jbossas-modules-eap Red Hat It was discovered that a programming error in the processing of HTTPS requests in the Apache... CVE-2017-6056 Fix available 7.5 HighFebruary 13, 2017
• jbossas-modules-eap Red Hat Improper Input Validation in Apache Tomcat CVE-2016-6816 Public exploitFix available EPSS 39.6% 7.1 HighNovember 23, 2016
• jbossas-modules-eap Red Hat Apache Tomcat vulnerable to SecurityManager bypass CVE-2016-6796 Fix available 7.5 HighOctober 28, 2016
• jbossas-modules-eap Red Hat Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat CVE-2016-5018 Fix available EPSS 10.3% 9.1 CriticalOctober 28, 2016
• jbossas-modules-eap Red Hat Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain CVE-2016-4978 Fix available 7.2 HighSeptember 27, 2016
• jbossas-modules-eap Red Hat Denial of service in JBoss resteasy CVE-2016-6346 Fix available 7.5 HighSeptember 7, 2016
• jbossas-modules-eap Red Hat Improper Input Validation in JGroups CVE-2016-2141 Fix available 9.8 CriticalJune 30, 2016
• jbossas-modules-eap Red Hat High severity vulnerability that affects commons-fileupload:commons-fileupload CVE-2016-3092 Fix available EPSS 37.2% 7.5 HighJune 23, 2016
• jbossas-modules-eap Red Hat The HTTPS NIO Connector allows remote attackers to cause a denial of service (thread consumption)... CVE-2016-2094 7.5 HighMay 6, 2016
• jbossas-modules-eap Red Hat Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat CVE-2015-5174 Fix available EPSS 12.6% 4.3 MediumFebruary 24, 2016
• jbossas-modules-eap Red Hat Deserialization of Untrusted Data in Apache commons collections CVE-2015-7501 Known exploitedPublic exploitFix available EPSS 85.6% 9.8 CriticalJanuary 14, 2016
• jbossas-modules-eap Red Hat Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.5 does not properly authorize... CVE-2015-5304 3.5 LowDecember 16, 2015
• jbossas-modules-eap Red Hat The Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly ... CVE-2015-5220 5.0 MediumOctober 27, 2015
• jbossas-modules-eap Red Hat Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat... CVE-2015-5188 6.8 MediumOctober 27, 2015
• Show olderLoading…