Skip to content

objectweb-asm vulnerabilities (Red Hat)

25 vulnerabilities.

objectweb-asm Red Hat Plexus-Utils has a Directory Traversal vulnerability in its extractFile method CVE-2025-67030 Fix available 8.8 HighMarch 25, 2026
objectweb-asm Red Hat Apache Commons BeanUtils: PropertyUtilsBean does not suppresses an enum's declaredClass property by default CVE-2025-48734 Public exploitFix available 8.8 HighMay 28, 2025
objectweb-asm Red Hat Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token... CVE-2014-3590 6.5 MediumJanuary 2, 2020
objectweb-asm Red Hat Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019
objectweb-asm Red Hat A cross-site scripting (XSS) flaw was found in how the failed action entry is processed in Red... CVE-2017-7514 Fix available 4.3 MediumNovember 9, 2017
objectweb-asm Red Hat Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit... CVE-2015-3235 6.0 MediumAugust 14, 2015
objectweb-asm Red Hat Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,... CVE-2015-3155 5.0 MediumAugust 14, 2015
objectweb-asm Red Hat Foreman before 1.7.5 allows remote authenticated users to bypass organization and location... CVE-2015-1844 4.0 MediumAugust 14, 2015
objectweb-asm Red Hat Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in... CVE-2015-1816 5.0 MediumAugust 14, 2015
objectweb-asm Red Hat Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1... CVE-2014-3653 4.3 MediumJuly 6, 2015
objectweb-asm Red Hat Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before... CVE-2014-7812 3.5 LowSeptember 29, 2014
objectweb-asm Red Hat Multiple cross-site scripting (XSS) vulnerabilities in Spacewalk and Red Hat Network (RHN)... CVE-2014-7811 3.5 LowSeptember 29, 2014
objectweb-asm Red Hat SimpleGeo python-oauth2 does not check the nonce allowing replay attacks CVE-2013-4346 Fix available 4.3 MediumMay 20, 2014
objectweb-asm Red Hat SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces CVE-2013-4347 Fix available 5.8 MediumOctober 25, 2013
objectweb-asm Red Hat The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node... CVE-2012-4557 Fix available EPSS 17.5% 5.0 MediumNovember 30, 2012
objectweb-asm Red Hat Stack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache... CVE-2011-0419 Public exploitFix available EPSS 30.4% 4.3 MediumMay 15, 2011
objectweb-asm Red Hat Improper Neutralization of Input During Web Page Generation in Apache Tomcat CVE-2011-0013 Fix available EPSS 10.0% 4.3 MediumFebruary 13, 2011
objectweb-asm Red Hat Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat CVE-2010-3718 Fix available 1.2 LowFebruary 10, 2011
objectweb-asm Red Hat Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the... CVE-2010-4647 Public exploitFix available 4.3 MediumJanuary 13, 2011
objectweb-asm Red Hat Improper Neutralization of Input During Web Page Generation in Apache Tomcat CVE-2010-4172 Public exploitFix available EPSS 42.0% 4.3 MediumNovember 26, 2010
objectweb-asm Red Hat Memory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache... CVE-2010-1623 Fix available EPSS 20.3% 5.0 MediumOctober 4, 2010
objectweb-asm Red Hat The (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow... CVE-2010-1452 Fix available EPSS 21.4% 5.0 MediumJuly 28, 2010
objectweb-asm Red Hat Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat CVE-2010-1157 Public exploitFix available EPSS 52.5% 2.6 LowApril 23, 2010
objectweb-asm Red Hat Apache Tomcat affected by vulnerability in TLS and SSL protocol CVE-2009-3555 Public exploitFix available EPSS 87.3% 5.8 MediumNovember 9, 2009
objectweb-asm Red Hat JBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4... CVE-2008-3273 Fix available EPSS 47.1% 5.0 MediumAugust 10, 2008