qpid-java vulnerabilities (Red Hat)

20 vulnerabilities.

• qpid-java Red Hat Versions of Foreman as shipped with Red Hat Satellite 6 does not check for a correct CSRF token... CVE-2014-3590 Fix available 6.5 MediumJanuary 2, 2020
• qpid-java Red Hat qpid-cpp 1.0 crashes when a large message is sent and the Digest-MD5 mechanism with a security... CVE-2009-5004 Fix available 6.5 MediumNovember 9, 2019
• qpid-java Red Hat Foreman before 1.9.0 allows remote authenticated users with the edit_users permission to edit... CVE-2015-3235 Fix available 6.0 MediumAugust 14, 2015
• qpid-java Red Hat Foreman before 1.8.1 does not set the secure flag for the _session_id cookie in an https session,... CVE-2015-3155 Fix available 5.0 MediumAugust 14, 2015
• qpid-java Red Hat Foreman before 1.7.5 allows remote authenticated users to bypass organization and location... CVE-2015-1844 Fix available 4.0 MediumAugust 14, 2015
• qpid-java Red Hat Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in... CVE-2015-1816 Fix available 5.0 MediumAugust 14, 2015
• qpid-java Red Hat Cross-site scripting (XSS) vulnerability in the template preview function in Foreman before 1.6.1... CVE-2014-3653 Fix available 4.3 MediumJuly 6, 2015
• qpid-java Red Hat SimpleGeo python-oauth2 does not check the nonce allowing replay attacks CVE-2013-4346 Fix available 4.3 MediumMay 20, 2014
• qpid-java Red Hat SimpleGeo python-oauth2 vulnerable to the use of Insufficiently Random Values to generate nonces CVE-2013-4347 Fix available 5.8 MediumOctober 25, 2013
• qpid-java Red Hat Apache Qpid Python client Improper certificate validation CVE-2013-1909 Fix available 5.8 MediumAugust 23, 2013
• qpid-java Red Hat Integer overflow in the qpid::framing::Buffer::checkAvailable function in Apache Qpid 0.20 and... CVE-2012-4459 Fix available 5.0 MediumMarch 12, 2013
• qpid-java Red Hat The AMQP type decoder in Apache Qpid 0.20 and earlier allows remote attackers to cause a denial... CVE-2012-4458 Fix available 5.0 MediumMarch 12, 2013
• qpid-java Red Hat Improper Authentication in Apache Qpid CVE-2012-4446 Fix available 6.8 MediumMarch 12, 2013
• qpid-java Red Hat Apache Qpid 0.17 and earlier does not properly restrict incoming client connections, which allows... CVE-2012-2145 Fix available 5.0 MediumSeptember 28, 2012
• qpid-java Red Hat Apache QPID Allows Remote Authentication Bypass CVE-2012-3467 Fix available 5.0 MediumAugust 27, 2012
• qpid-java Red Hat Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which... CVE-2011-3620 Fix available 7.5 HighMay 3, 2012
• qpid-java Red Hat The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3... CVE-2010-4179 Fix available 7.5 HighDecember 7, 2010
• qpid-java Red Hat The SessionAdapter::ExchangeHandlerImpl::checkAlternate function in broker/SessionAdapter.cpp in... CVE-2009-5006 Fix available 4.0 MediumOctober 18, 2010
• qpid-java Red Hat The Cluster::deliveredEvent function in cluster/Cluster.cpp in Apache Qpid, as used in Red Hat... CVE-2009-5005 Fix available 5.0 MediumOctober 18, 2010
• qpid-java Red Hat Apache Tomcat affected by vulnerability in TLS and SSL protocol CVE-2009-3555 Public exploitFix available EPSS 87.3% 5.8 MediumNovember 9, 2009