Skip to contentRed Hat Integration Camel K 1 vulnerabilities
- red hat build of apicurio registry 2, build of quarkus, data grid 8 +7 more +9 moreUndertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacksCVE-2024-4027Fix available7.5 High
- red hat openshift serverless, build of apache camel - hawtio 4, build of apache camel 4 for quarkus 3 +29 more +31 moreUndertow: outofmemory when parsing form data encoding with application/x-www-form-urlencodedCVE-2024-3884Fix available7.5 High
- red hat build of apache camel 4.8 for quarkus 3.15, build of apache camel 4.8.5 for spring boot, build of apicurio registry 2 +8 more +10 moreSmallrye-fault-tolerance: smallrye fault toleranceCVE-2025-2240Fix available7.5 High
- red hat build of keycloak, data grid 8, fuse 7 +13 more +15 moreOrg.wildfly.core:wildfly-elytron-integration: wildfly elytron brute force attack via cliCVE-2025-23368Fix available8.1 High
- red hat .net 6.0 on red hat enterprise linux, cryostat 3, logging subsystem for red hat openshift +52 more +54 moreNpm-serialize-javascript: cross-site scripting (xss) in serialize-javascriptCVE-2024-11831Fix available5.4 Medium
- red hat cryostat 3, cryostat 4 on rhel 9, hawtio hawtio 4.2.0 +12 more +14 moreIo.quarkus.http/quarkus-http-core: quarkus http cookie smugglingCVE-2024-12397Fix available7.4 High
- red hat hawtio 4.0.0 for red hat build of apache camel 4, build of apache camel 3.20.7 for spring boot, build of apache camel 4.4.2 for spring boot +26 more +28 moreUndertow: improper state management in proxy protocol parsing causes information leakageCVE-2024-7885Fix available7.5 High
- red hat openshift serverless, build of apache camel - hawtio 4, build of apache camel 4 for quarkus 3 +21 more +23 moreUndertow: learningpushhandler can lead to remote memory dos attacksCVE-2024-3653Fix available5.3 Medium
- red hat build of apache camel - hawtio 4, build of apache camel 3.20.7 for spring boot, build of apache camel 4.4.1 for spring boot 3.2 +17 more +19 moreUndertow: response write hangs in case of java 17 tlsv1.3 newsessionticketCVE-2024-5971Fix available7.5 High
- red hat eap 8.0.1, build of apache camel - hawtio 4, build of apache camel 4.4.1 for spring boot 3.2 +11 more +13 moreUndertow: url-encoded request path information can be broken on ajp-listenerCVE-2024-6162Fix available7.5 High
- red hat a-mq clients 2, cryostat 2, openshift serverless +9 more +11 moreQuarkus: authorization flaw in quarkus resteasy reactive and classic when "quarkus.security.jaxrs.deny-unannotated-endpoints" or "quarkus.security.jaxrs.default-roles-allowed" properties are used.CVE-2023-5675Fix available6.5 Medium
- red hat hawtio 4.0.0 for red hat build of apache camel 4, amq streams 2.7.0, build of apache camel 4 for quarkus 3 +9 more +11 moreQuarkus-core: leak of local configuration properties into quarkus applicationsCVE-2024-2700Fix available7.0 High
- red hat a-mq clients 2, ceq 3.2, cryostat 2 on rhel 8 +22 more +24 moreIo.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni supportCVE-2024-1300Fix available5.4 Medium
- red hat a-mq clients 2, ceq 3.2, cryostat 2 on rhel 8 +22 more +24 moreIo.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertxCVE-2024-1023Fix available6.5 Medium
- red hat build of apache camel - hawtio 4, build of apache camel 4.4.0 for spring boot, build of apache camel for spring boot 3 +15 more +17 moreXnio: stackoverflowexception when the chain of notifier states becomes problematically bigCVE-2023-5685Fix available7.5 High
- netapp active iq unified manager, oncommand workflow automation, red hat openshift serverless +35 more +37 moreUndertow: out-of-memory error after several closed connections with wildfly-http-client protocolCVE-2024-1635Fix available7.5 High
- quarkus, red hat build of optaplanner 8, build of quarkus 2.13.9.final +4 more +6 moreQuarkus: json payload getting processed prior to security checks when rest resources are used with annotations.CVE-2023-6267Fix available8.6 High