ldapjdk vulnerabilities (Red Hat)

43 vulnerabilities.

• ldapjdk Red Hat Pki-core: dogtag/pki: certprofile-import allows code execution via unsanitized profile content (externalprocessconstraint) CVE-2026-76561 Fix available 7.2 HighSeptember 8, 2026
• ldapjdk Red Hat Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects CVE-2026-18369 Fix available 5.8 MediumJuly 30, 2026
• ldapjdk Red Hat jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation CVE-2026-54512 Public exploitFix available 8.1 HighJune 23, 2026
• ldapjdk Red Hat jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) CVE-2026-54513 Fix available 8.1 HighJune 23, 2026
• ldapjdk Red Hat Apache Tomcat: Denial of Service CVE-2024-38286 Fix available 8.6 HighAugust 21, 2024
• ldapjdk Red Hat Ca: token authentication bypass vulnerability CVE-2023-4727 Fix available 7.5 HighJune 11, 2024
• ldapjdk Red Hat Access to external entities when parsing XML documents can lead to XML external entity (XXE)... CVE-2022-2414 Public exploitFix available EPSS 85.4% 7.5 HighJuly 29, 2022
• ldapjdk Red Hat A flaw was found in pki-core, which could allow a user to get a certificate for another user... CVE-2022-2393 Fix available 5.7 MediumJuly 14, 2022
• ldapjdk Red Hat A flaw was found in JSS, where it did not properly free up all memory. Over time, the wasted... CVE-2021-4213 Fix available 7.5 HighMay 10, 2022
• ldapjdk Red Hat A flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores... CVE-2021-3551 Fix available 7.8 HighJune 3, 2021
• ldapjdk Red Hat A flaw was found in pki-core. An attacker who has successfully compromised a key could use this... CVE-2021-20179 Fix available 8.1 HighMarch 15, 2021
• ldapjdk Red Hat Response mix-up with WebSocket concurrent send and close CVE-2022-25762 Fix available 8.6 HighNovember 3, 2020
• ldapjdk Red Hat A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a... CVE-2020-25715 Fix available 6.1 MediumNovember 3, 2020
• ldapjdk Red Hat A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it... CVE-2020-1721 Fix available 6.1 MediumNovember 3, 2020
• ldapjdk Red Hat In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests... CVE-2020-15720 Fix available 6.8 MediumJuly 14, 2020
• ldapjdk Red Hat Improper Input Validation in RESTEasy CVE-2020-1695 Fix available 7.5 HighMay 19, 2020
• ldapjdk Red Hat Potential XSS vulnerability in jQuery CVE-2020-11023 In KEVPublic exploitFix available EPSS 84.9% 6.9 MediumApril 29, 2020
• ldapjdk Red Hat jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• ldapjdk Red Hat A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA)... CVE-2019-10179 Fix available 4.3 MediumMarch 20, 2020
• ldapjdk Red Hat A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where... CVE-2019-10221 Fix available 4.3 MediumMarch 20, 2020
• ldapjdk Red Hat jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10672 Fix available 8.8 HighMarch 18, 2020
• ldapjdk Red Hat jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10673 Public exploitFix available 8.8 HighMarch 18, 2020
• ldapjdk Red Hat A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the... CVE-2019-10146 Fix available 4.7 MediumMarch 18, 2020
• ldapjdk Red Hat jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9546 Fix available 9.8 CriticalMarch 2, 2020
• ldapjdk Red Hat jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9547 Public exploitFix available EPSS 18.4% 9.8 CriticalMarch 2, 2020
• ldapjdk Red Hat jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9548 Public exploitFix available EPSS 18.9% 9.8 CriticalMarch 2, 2020
• ldapjdk Red Hat Improper Privilege Management in Tomcat CVE-2020-1938 In KEVPublic exploitFix available EPSS 99.3% 9.8 CriticalFebruary 24, 2020
• ldapjdk Red Hat Potential HTTP request smuggling in Apache Tomcat CVE-2020-1935 Fix available 4.8 MediumFebruary 24, 2020
• ldapjdk Red Hat Deserialization of Untrusted Data in jackson-databind CVE-2020-8840 Public exploitFix available EPSS 26.6% 9.8 CriticalFebruary 10, 2020
• ldapjdk Red Hat Deserialization of Untrusted Data in jackson-databind CVE-2019-20330 Fix available 9.8 CriticalJanuary 3, 2020
• ldapjdk Red Hat jackson-databind polymorphic typing issue CVE-2019-17531 Fix available 9.8 CriticalOctober 12, 2019
• ldapjdk Red Hat jackson-databind polymorphic typing issue CVE-2019-16943 Fix available 9.8 CriticalOctober 1, 2019
• ldapjdk Red Hat Polymorphic Typing in FasterXML jackson-databind CVE-2019-16942 Fix available 9.8 CriticalOctober 1, 2019
• ldapjdk Red Hat Polymorphic Typing issue in FasterXML jackson-databind CVE-2019-16335 Fix available 9.8 CriticalSeptember 15, 2019
• ldapjdk Red Hat Polymorphic Typing issue in FasterXML jackson-databind CVE-2019-14540 Public exploitFix available EPSS 10.8% 9.8 CriticalSeptember 15, 2019
• ldapjdk Red Hat Deserialization of untrusted data in FasterXML jackson-databind CVE-2019-12814 Public exploitFix available EPSS 10.9% 5.9 MediumJune 19, 2019
• ldapjdk Red Hat Information exposure in FasterXML jackson-databind CVE-2019-12086 Public exploitFix available EPSS 21.9% 7.5 HighMay 17, 2019
• ldapjdk Red Hat XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• ldapjdk Red Hat Bootstrap Vulnerable to Cross-Site Scripting CVE-2019-8331 Public exploitFix available EPSS 16.4% 6.1 MediumFebruary 20, 2019
• ldapjdk Red Hat Bootstrap Cross-site Scripting vulnerability CVE-2016-10735 Public exploitFix available 6.1 MediumJanuary 9, 2019
• ldapjdk Red Hat Bootstrap Cross-site Scripting vulnerability CVE-2018-14042 Public exploitFix available 6.1 MediumJuly 13, 2018
• ldapjdk Red Hat Bootstrap vulnerable to Cross-Site Scripting (XSS) CVE-2018-14040 Public exploitFix available 6.1 MediumJuly 13, 2018
• ldapjdk Red Hat Cross-Site Scripting (XSS) in jquery CVE-2015-9251 Public exploitFix available EPSS 29.7% 6.1 MediumJanuary 18, 2018