xalan-j2 vulnerabilities (Red Hat)
70 vulnerabilities.
xalan-j2Red HatImproper Authorization in Apache Xalan-Java7.5 Highxalan-j2Red HatThe mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node...5.0 Mediumxalan-j2Red HatThe servlets invoked by httpha-invoker in JBoss Enterprise Application Platform before 5.1.2, SOA...6.8 Mediumxalan-j2Red HatOpenID4Java does not verify that Attribute Exchange (AX) information is signed5.8 Mediumxalan-j2Red Hatjboss-seam.jar in the JBoss Seam 2 framework 2.2.x and earlier, as distributed in Red Hat JBoss...6.8 Mediumxalan-j2Red HatStack consumption vulnerability in the fnmatch implementation in apr_fnmatch.c in the Apache...4.3 Mediumxalan-j2Red HatImproper Neutralization of Input During Web Page Generation in Apache Tomcat4.3 Mediumxalan-j2Red HatImproper Limitation of a Pathname to a Restricted Directory in Apache Tomcat1.2 Lowxalan-j2Red HatCross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise...4.3 Mediumxalan-j2Red HatThe org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run...2.6 Lowxalan-j2Red HatDrools Improper Input Validation vulnerability allows remote attackers to execute arbitrary code in JBoss EAP7.5 Highxalan-j2Red HatImproper Neutralization of Input During Web Page Generation in Apache Tomcat4.3 Mediumxalan-j2Red HatMemory leak in the apr_brigade_split_line function in buckets/apr_brigade.c in the Apache...5.0 Mediumxalan-j2Red HatThe (1) mod_cache and (2) mod_dav modules in the Apache HTTP Server 2.2.x before 2.2.16 allow...5.0 Mediumxalan-j2Red HatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat2.6 Lowxalan-j2Red HatThe request handler in JBossWS in JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP)...5.0 Mediumxalan-j2Red HatJBoss Enterprise Application Platform (aka JBossEAP or EAP) before 4.2.0.CP03, and 4.3.0 before 4...5.0 Medium