rh-sso7-runtime vulnerabilities (Red Hat)

16 vulnerabilities.

• rh-sso7-runtime Red Hat A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response... CVE-2022-1319 Fix available 7.5 HighAugust 31, 2022
• rh-sso7-runtime Red Hat Stored Cross-Site Scripting (XSS) in Keycloak via groups dropdown CVE-2022-0225 Fix available 5.4 MediumAugust 26, 2022
• rh-sso7-runtime Red Hat XNIO `notifyReadClosed` method logging message to unexpected end CVE-2022-0084 Fix available 7.5 HighAugust 26, 2022
• rh-sso7-runtime Red Hat Keycloak has Files or Directories Accessible to External Parties CVE-2021-3856 Fix available 4.3 MediumAugust 26, 2022
• rh-sso7-runtime Red Hat Keycloak SAML javascript protocol mapper: Uploading of scripts through admin console CVE-2022-2668 Fix available 7.2 HighAugust 5, 2022
• rh-sso7-runtime Red Hat This is a concurrency issue that can result in the wrong caller principal being returned from the... CVE-2022-0866 Fix available 5.3 MediumMay 10, 2022
• rh-sso7-runtime Red Hat A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss... CVE-2022-0853 Public exploit 7.5 HighMarch 11, 2022
• rh-sso7-runtime Red Hat Deeply nested json in jackson-databind CVE-2020-36518 Public exploitFix available 7.5 HighMarch 11, 2022
• rh-sso7-runtime Red Hat Improper Restriction of XML External Entity Reference in liquibase/liquibase CVE-2022-0839 Fix available 7.3 HighMarch 4, 2022
• rh-sso7-runtime Red Hat Apache ActiveMQ Artemis DoS CVE-2022-23913 Fix available 7.5 HighFebruary 4, 2022
• rh-sso7-runtime Red Hat RCE in H2 Console CVE-2021-42392 Public exploitFix available EPSS 83.2% 9.8 CriticalJanuary 6, 2022
• rh-sso7-runtime Red Hat HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling CVE-2021-43797 Fix available 6.5 MediumDecember 9, 2021
• rh-sso7-runtime Red Hat Policies not properly enforced in OWASP Java HTML Sanitizer CVE-2021-42575 Fix available 9.8 CriticalOctober 18, 2021
• rh-sso7-runtime Red Hat keycloak-core vulnerable to timing attacks against JWS token verification CVE-2017-2585 Fix available 5.9 MediumMarch 12, 2018
• rh-sso7-runtime Red Hat Red Hat Wildfly DoS CVE-2016-9589 Fix available 7.5 HighMarch 12, 2018
• rh-sso7-runtime Red Hat Moderate severity vulnerability that affects org.keycloak:keycloak-core CVE-2016-8629 Fix available 6.5 MediumMarch 12, 2018