Skip to contentRed Hat Jboss vulnerabilities
- netapp active iq unified manager, oncommand workflow automation, red hat openshift serverless +35 more +37 moreUndertow: out-of-memory error after several closed connections with wildfly-http-client protocolCVE-2024-1635Fix available7.5 High
- redhat undertow, red hat build of quarkus, data grid 8 +12 more +14 moreUndertow: directory traversal vulnerabilityCVE-2024-1459Fix available5.3 Medium
- red hat eap 7.4.14, jboss enterprise application platform 7.4 for rhel 8, jboss enterprise application platform 7.4 for rhel 9 +3 more +5 moreEap-galleon: custom provisioning creates unsecured http-invokerCVE-2023-45036.8 Medium
- red hat eap 7.4.13, jboss enterprise application platform 7.4 for rhel 8, jboss enterprise application platform 7.4 for rhel 9 +2 more +4 moreEap-7: heap exhaustion via deserializationCVE-2023-31717.5 High
- redhat keycloak, red hat migration toolkit for applications 6, migration toolkit for applications 7 +21 more +23 moreKeycloak: redirect_uri validation bypassCVE-2023-6291Fix available7.1 High
- infinispan, red hat build of apache camel 4 for quarkus 3, build of apache camel for spring boot 4 +13 more +15 moreInfinispan: circular reference on marshalling leads to dosCVE-2023-5236Fix available4.4 Medium
- infinispan, red hat data grid 8.4.4, jboss enterprise application platform 6 +3 more +5 moreInfinispan: non-admins should not be able to get cache config via rest apiCVE-2023-3629Fix available4.3 Medium
- infinispan, red hat data grid 8.4.4, jboss enterprise application platform 6 +3 more +5 moreInfispan: rest bulk ops don't check permissionsCVE-2023-3628Fix available6.5 Medium
- modcluster mod proxy cluster, red hat jboss core services for rhel 8, jboss core services on rhel 7 +3 more +5 moreMod_cluster/mod_proxy_cluster: stored cross site scriptingCVE-2023-6710Public exploit5.4 Medium
- redhat undertow, red hat build of quarkus, data grid 8 +12 more +14 moreUndertow: ajp request closes connection exceeding maxrequestsizeCVE-2023-5379Fix available7.5 High
- red hat jboss enterprise application platform, jboss enterprise application platform 7.4 for rhel 8, jboss enterprise application platform 7.4 for rhel 9 +3 more +5 moreWildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actorCVE-2023-4061Fix available6.5 Medium
- netty, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, data grid 8.6.2 +7 more +9 moreNetty has unbounded pre-allocation in RedisArrayAggregator from RESP array lengthCVE-2026-50011Public exploitFix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty's wrapping plain trust manager silently disables hostname verificationCVE-2026-50010Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +24 more +26 moreNetty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory ExhaustionCVE-2026-48059Fix available8.7 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +24 more +26 morenetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory ExhaustionCVE-2026-48043Fix available5.3 Medium
- netty, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, data grid 8.6.2 +7 more +9 moreNetty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregatorCVE-2026-48006Fix available8.7 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 moreNetty has Insufficient Bailiwick Validation for NS RecordsCVE-2026-47691Fix available8.7 High
- netty, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, data grid 8.6.2 +8 more +10 moreNetty: SCTP reassembly nests buffers without boundCVE-2026-46340Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 moreNetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME RecordsCVE-2026-45674Public exploitFix available8.7 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytesCVE-2026-45416Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +23 more +25 moreNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV lengthCVE-2026-44893Fix available7.5 High
- netty, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, data grid 8.6.2 +7 more +9 moreNetty has Unbounded Direct Memory Consumption in its RedisDecoderCVE-2026-44890Fix available7.5 High
- netty, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, data grid 8.6.2 +7 more +9 moreNetty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested ArraysCVE-2026-44250Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +33 more +35 moreNetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator MaskingCVE-2026-44249Fix available8.1 High
- netty, io.netty netty-codec-mqtt, red hat amq broker 7.13.6 +8 more +10 moreNetty: Resource exhaustion in MqttDecoderCVE-2026-44248Fix available5.3 Medium
- netty, io.netty netty-codec-http, netty-codec-http2 +37 more +39 moreNetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoSCVE-2026-42587Fix available7.5 High
- netty, io.netty netty-codec-http, red hat cryostat 4 on rhel 9 +33 more +35 moreNetty: HttpClientCodec response desynchronizationCVE-2026-42584Fix available7.3 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +32 more +34 moreNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling SanitizationCVE-2026-42581Fix available5.8 Medium
- netty, red hat cryostat 4 on rhel 9, openshift serverless +28 more +30 moreNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)CVE-2026-42579Fix available7.5 High
- netty, red hat cryostat 4 on rhel 9, openshift serverless +32 more +34 moreNetty: HTTP Header Injection via HttpProxyHandler Disabled ValidationCVE-2026-42578Fix available2.9 Low
- netty, red hat cryostat 4, cryostat 4 on rhel 9 +37 more +39 moreNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame BypassCVE-2026-33871Public exploitFix available8.7 High
- netty, red hat cryostat 4 on rhel 9, logging subsystem for red hat openshift +33 more +35 moreNetty: HTTP Request Smuggling via Chunked Extension Quoted-String ParsingCVE-2026-33870Fix available7.5 High
- dogtagpki network security services for java, fedora extra packages for enterprise linux, fedora +7 more +9 moreMemory leak on tls connectionsCVE-2022-4132Fix available5.9 Medium
- redhat undertow, red hat build of quarkus, data grid 8 +25 more +27 moreUndertow: outofmemoryerror due to @multipartconfig handlingCVE-2023-3223Fix available7.5 High
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: xml external entity (xxe) injectionCVE-2022-4245Fix available4.3 Medium
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: directory traversalCVE-2022-4244Public exploitFix available7.5 High
- redhat openshift container platform, red hat openshift serverless, openshift service mesh 2.2.x +13 more +15 moreOcp & fips modeCVE-2023-3089Fix available7.0 High
- redhat undertow, netapp oncommand workflow automation, red hat eap 7.4.10 release +31 more +33 moreUndertow: infinite loop in sslconduit during closeCVE-2023-1108Fix available7.5 High
- redhat drools, red hat build of apache camel for spring boot, build of quarkus +16 more +18 moreDrools: unsafe data deserialization in streamutilsCVE-2022-1415Fix available8.1 High
- isaacs node-tar, tar, red hat confidential compute attestation +40 more +42 morenode-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path SanitizationCVE-2026-23745Public exploitFix available8.2 High
- apache wss4j, red hat jbossws, apache cxf +8 more +10 moreUse of a Broken or Risky Cryptographic Algorithm in Apache WSS4JCVE-2011-2487Fix available5.9 Medium
- red hat jboss brms, jboss enterprise application platform, jboss enterprise web server +3 more +5 moreEJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat...CVE-2012-56267.5 High
- red hat jboss eap, redhat jboss enterprise application platform, single sign-on +2 moreA flaw was found in the JBoss EAP Vault system in all versions before 7.2.6.GA. Confidential...CVE-2019-14885Fix available5.4 Medium
- red hat jboss portalIt was found that the implementation of the GTNSubjectCreatingInterceptor class in gatein-wsrp...CVE-2014-02455.9 Medium
- red hat jboss eap, redhat jboss enterprise application platform +1 moreIn JBoss EAP 6 a security domain is configured to use a cache that is shared between all...CVE-2014-01696.5 Medium
- jboss brms brms, red hat jboss brms, redhat jboss business rules management system +2 moreJBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter.CVE-2010-38576.1 Medium
- red hat jboss, redhat jboss operations network +1 moreA missing permission check was found in The CLI in JBoss Operations Network before 2.3.1 does not...CVE-2010-07378.0 High
- google angularjs, red hat enterprise linux 10, enterprise linux 7 +7 more +9 moreAngularJS XSS via SCE resource URL sanitization bypassCVE-2026-11998Fix available7.6 High
- [unknown] richfaces, red hat jboss richfaces framework, redhat enterprise linux +2 moreRichfaces vulnerable to arbitrary code executionCVE-2018-14667In KEVPublic exploitFix availableEPSS 70.8%9.8 Critical
- red hat jboss enterprise application platformIt was found that the improper default permissions on /tmp/auth directory in JBoss Enterprise...CVE-2016-70667.8 High
- Show moreLoading…