pki-servlet-engine vulnerabilities (Rocky Linux)
24 vulnerabilities.
-
pki-servlet-engineRocky Linux jackson-core: Delayed maxNameLength enforcement for char-backed input (ReaderBasedJsonParser) allows memory-exhaustion denial of service 7.5 High -
pki-servlet-engineRocky Linux jackson-databind: quadratic forward-reference completion in Collection and Map deserializers 7.5 High -
pki-servlet-engineRocky Linux jackson-core: UTF8DataInputJsonParser._reportInvalidToken() does not honor maxErrorTokenLength, allowing unbounded StringBuilder growth 7.5 High -
pki-servlet-engineRocky Linux jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) 8.1 High -
pki-servlet-engineRocky Linux jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data 8.7 High -
pki-servlet-engineRocky Linux Deeply nested json in jackson-databind 7.5 High -
pki-servlet-engineRocky Linux Response mix-up with WebSocket concurrent send and close 8.6 High -
pki-servlet-engineRocky Linux A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a... 6.1 Medium -
pki-servlet-engineRocky Linux A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it... 6.1 Medium -
pki-servlet-engineRocky Linux In Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests... 6.8 Medium -
pki-servlet-engineRocky Linux Improper Input Validation in RESTEasy 7.5 High -
pki-servlet-engineRocky Linux Potential XSS vulnerability in jQuery 6.9 Medium -
pki-servlet-engineRocky Linux jQuery has a potential XSS vulnerability 6.9 Medium -
pki-servlet-engineRocky Linux A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA)... 4.3 Medium -
pki-servlet-engineRocky Linux A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where... 4.3 Medium -
pki-servlet-engineRocky Linux A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the... 4.7 Medium -
pki-servlet-engineRocky Linux Improper Privilege Management in Tomcat 9.8 Critical -
pki-servlet-engineRocky Linux Potential HTTP request smuggling in Apache Tomcat 4.8 Medium -
pki-servlet-engineRocky Linux XSS in jQuery as used in Drupal, Backdrop CMS, and other products 6.1 Medium -
pki-servlet-engineRocky Linux Bootstrap Vulnerable to Cross-Site Scripting 6.1 Medium -
pki-servlet-engineRocky Linux Bootstrap Cross-site Scripting vulnerability 6.1 Medium -
pki-servlet-engineRocky Linux Bootstrap Cross-site Scripting vulnerability 6.1 Medium -
pki-servlet-engineRocky Linux Bootstrap vulnerable to Cross-Site Scripting (XSS) 6.1 Medium -
pki-servlet-engineRocky Linux Cross-Site Scripting (XSS) in jquery 6.1 Medium