jbossas-modules-eap vulnerabilities (Red Hat)
108 vulnerabilities.
jbossas-modules-eapRed HatThe Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly ...4.3 Mediumjbossas-modules-eapRed HatPicketLink does not properly check role based authorization4.0 Mediumjbossas-modules-eapRed HatCross-site scripting (XSS) vulnerability in the manager web interface in mod_cluster before 1.3.2...4.3 Mediumjbossas-modules-eapRed HatThe (1) Service Provider (SP) and (2) Identity Provider (IdP) in PicketLink before 2.7.0 does not...6.0 Mediumjbossas-modules-eapRed HatThe Service Provider (SP) in PicketLink before 2.7.0 does not ensure that it is a member of an...6.0 Mediumjbossas-modules-eapRed HatApache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous...5.0 Mediumjbossas-modules-eapRed HatThe default configuration for the Command Line Interface in Red Hat Enterprise Application...2.1 Lowjbossas-modules-eapRed HatXXE in Apache Standard Taglibs7.5 Highjbossas-modules-eapRed HatPicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and...3.6 Lowjbossas-modules-eapRed HatInformation disclosure in JBoss Weld4.3 Mediumjbossas-modules-eapRed HatThe JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application...4.0 Mediumjbossas-modules-eapRed HatThe Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP...4.0 Mediumjbossas-modules-eapRed HatThe org.jboss.security.plugins.mapping.JBossMappingManager implementation in JBoss Security in...3.5 Lowjbossas-modules-eapRed HatImproper Access Control in Apache WSS4J5.0 Mediumjbossas-modules-eapRed HatXML External Entity Reference in RESTEasy6.4 Mediumjbossas-modules-eapRed HatJBoss SX and PicketBox, as used in Red Hat JBoss Enterprise Application Platform (EAP) before 6.2...2.1 Lowjbossas-modules-eapRed HatImproper Authentication in Hibernate Validator5.0 Mediumjbossas-modules-eapRed HatThe isCallerInRole function in SimpleSecurityManager in JBoss Application Server (AS) 7, as used...4.9 Mediumjbossas-modules-eapRed HatThe EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise...5.5 Mediumjbossas-modules-eapRed HatThe mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism,...5.0 Mediumjbossas-modules-eapRed HatRace condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote...6.8 Mediumjbossas-modules-eapRed HatThe deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP...4.3 Mediumjbossas-modules-eapRed Hatorg.jboss.as.jaxrs.deployment.JaxrsIntegrationProcessor in Red Hat JBoss Enterprise Application...5.0 Mediumjbossas-modules-eapRed HatCleartext Transmission of Sensitive Information in Apache CXF4.3 Mediumjbossas-modules-eapRed HatImproper Input Validation in Apache CXF4.3 Mediumjbossas-modules-eapRed HatUncontrolled Resource Consumption in Apache CXF4.3 Mediumjbossas-modules-eapRed HatUncontrolled Resource Consumption in Apache CXF4.3 Mediumjbossas-modules-eapRed HatNetty denial of service vulnerability5.0 Mediumjbossas-modules-eapRed HatRed Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2, when using a Java Security Manager ...5.8 Mediumjbossas-modules-eapRed HatApache Tomcat is vulnerable to HTTP request-smuggling5.8 Mediumjbossas-modules-eapRed HatRed Hat JBoss Enterprise Application Platform (JBEAP) 6.2.0 and JBoss WildFly Application Server,...1.9 Lowjbossas-modules-eapRed HatExposure of Sensitive Information to an Unauthorized Actor in OpenSAML5.0 Mediumjbossas-modules-eapRed HatImproper Input Validation in Apache Santuario XML Security4.3 Mediumjbossas-modules-eapRed HatThe EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise...5.5 Mediumjbossas-modules-eapRed HatRed Hat JBoss Enterprise Application Platform (EAP) before 6.1.0 and JBoss Portal before 6.1.0...3.7 Lowjbossas-modules-eapRed HatThe org.apache.catalina.connector.Response.encodeURL method in Red Hat JBoss Web 7.1.x and...4.3 Mediumjbossas-modules-eapRed HatExposure of Sensitive Information to an Unauthorized Actor in JGroup5.4 Mediumjbossas-modules-eapRed HatPicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local...1.9 Lowjbossas-modules-eapRed HatImproper Control of Generation of Code in HawtJNI4.4 Mediumjbossas-modules-eapRed HatInefficient Algorithmic Complexity in Apache Santuario XML Security4.3 Mediumjbossas-modules-eapRed HatInadequate Encryption Strength in Apache CXF6.4 Mediumjbossas-modules-eapRed HatUncontrolled Resource Consumption in Apache Tomcat7.8 Highjbossas-modules-eapRed HatImproper Input Validation in Apache Tomcat6.4 Mediumjbossas-modules-eapRed HatMissing XML Validation in Apache Xerces27.1 Highjbossas-modules-eapRed Hatmod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is...4.3 Mediumjbossas-modules-eapRed Hatmod_rewrite.c in the mod_rewrite module in the Apache HTTP Server 2.2.x before 2.2.25 writes data...5.1 Mediumjbossas-modules-eapRed HatImproper Authentication in Apache Tomcat6.8 Mediumjbossas-modules-eapRed HatMultiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the...4.3 Mediumjbossas-modules-eapRed HatMultiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24...4.3 Mediumjbossas-modules-eapRed HatJboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypass5.3 Medium- Show moreLoading…