Skip to content

mod_cluster-native vulnerabilities (Red Hat)

76 vulnerabilities.

mod_cluster-native Red HatXML Signature/Encryption Not Validated in Apache CXFCVE-2012-2379Fix available10.0 HighJanuary 3, 2013
mod_cluster-native Red HatApache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensionsCVE-2012-3544Fix availableEPSS 11.0%5.0 MediumDecember 31, 2012
mod_cluster-native Red HatUser confusion in IronJacamarCVE-2012-3428Fix available4.3 MediumDecember 20, 2012
mod_cluster-native Red HatAuthentication Bypass in Apache TomcatCVE-2012-3546Fix availableEPSS 12.0%4.3 MediumDecember 19, 2012
mod_cluster-native Red HatThe mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node...CVE-2012-4557Fix availableEPSS 17.5%5.0 MediumNovember 30, 2012
mod_cluster-native Red HatJGroups diagnostics service in JBoss Enterprise Portal Platform before 5.2.2, SOA Platform before...CVE-2012-23773.3 LowNovember 23, 2012
mod_cluster-native Red HatThe servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA...CVE-2011-4085Known exploited6.8 MediumNovember 23, 2012
mod_cluster-native Red HatCross-site request forgery (CSRF) vulnerability in the JMX Console (jmx-console) in JBoss...CVE-2011-29086.0 MediumNovember 23, 2012
mod_cluster-native Red HatThe W3C XML Encryption Standard, as used in the JBoss Web Services (JBossWS) component in JBoss...CVE-2011-10965.0 MediumNovember 23, 2012
mod_cluster-native Red HatRemote web-service operation execution in Apache CXFCVE-2012-3451Fix available4.3 MediumSeptember 24, 2012
mod_cluster-native Red HatMultiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in...CVE-2012-2687Fix availableEPSS 23.1%2.6 LowAugust 22, 2012
mod_cluster-native Red Hattwiddle.sh in JBoss AS 5.0 and EAP 5.0 and earlier accepts credentials as command-line arguments,...CVE-2009-50662.1 LowAugust 13, 2012
mod_cluster-native Red HatImproper Neutralization of Directives in Dynamically Evaluated Code in Spring FrameworkCVE-2011-2730Fix availableEPSS 11.8%7.5 HighJune 28, 2012
mod_cluster-native Red HatOracle Mojarra 2.1.7 does not properly "clean up" the FacesContext reference during startup,...CVE-2012-2672Fix available2.1 LowJune 17, 2012
mod_cluster-native Red Hatmod_cluster in JBoss Enterprise Application Platform 5.1.2 for Red Hat Linux allows worker nodes...CVE-2011-4608Fix available7.5 HighJanuary 27, 2012
mod_cluster-native Red HatOpenID4Java does not verify that Attribute Exchange (AX) information is signedCVE-2011-4314Fix available5.8 MediumJanuary 27, 2012
mod_cluster-native Red Hatjboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss...CVE-2011-2196Fix available6.8 MediumJuly 27, 2011
mod_cluster-native Red HatStack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache...CVE-2011-0419Public exploitFix availableEPSS 30.4%4.3 MediumMay 15, 2011
mod_cluster-native Red HatImproper Neutralization of Input During Web Page Generation in Apache TomcatCVE-2011-0013Fix availableEPSS 10.0%4.3 MediumFebruary 13, 2011
mod_cluster-native Red HatImproper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2010-3718Fix available1.2 LowFebruary 10, 2011
mod_cluster-native Red HatImproper Neutralization of Input During Web Page Generation in Apache TomcatCVE-2010-4172Public exploitFix availableEPSS 42.0%4.3 MediumNovember 26, 2010
mod_cluster-native Red HatMemory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache...CVE-2010-1623Fix availableEPSS 20.3%5.0 MediumOctober 4, 2010
mod_cluster-native Red HatThe (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow...CVE-2010-1452Fix availableEPSS 21.4%5.0 MediumJuly 28, 2010
mod_cluster-native Red HatExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2010-1157Public exploitFix availableEPSS 52.5%2.6 LowApril 23, 2010
mod_cluster-native Red HatJBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4...CVE-2008-3273Fix availableEPSS 47.1%5.0 MediumAugust 10, 2008
mod_cluster-native Red HatCross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server...CVE-2008-0455Public exploitFix availableEPSS 64.9%4.3 MediumJanuary 25, 2008