Skip to contentRed Hat Jboss Enterprise Application Platform 6 vulnerabilities
- hibernate hibernate-validator, red hat a-mq clients 2, cryostat 2 +29 more +31 moreHibernate-validator: rendering of invalid html with safehtml leads to html injection and xssCVE-2023-1932Fix available6.1 Medium
- red hat migration toolkit for applications 6, migration toolkit for runtimes 1 on rhel 8, build of apache camel for spring boot 3 +21 more +23 moreUndertow: cookie smuggling/spoofingCVE-2023-4639Fix available7.4 High
- jberet, red hat build of keycloak, data grid 8 +11 more +13 moreJberet: jberet-core logging database credentialsCVE-2024-1102Fix available6.5 Medium
- red hat migration toolkit for applications 6, migration toolkit for applications 7, amq broker 7 +18 more +20 moreKeycloak: xss via assertion consumer service url in saml post-binding flowCVE-2023-6717Fix available6.0 Medium
- red hat migration toolkit for applications 6, migration toolkit for applications 7, amq broker 7 +20 more +22 moreKeycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddosCVE-2024-1249Fix available7.4 High
- redhat keycloak, red hat migration toolkit for runtimes 1 on rhel 8, mta-6.2-rhel-9 +26 more +28 moreKeycloak: path transversal in redirection validationCVE-2024-1132Fix available8.1 High
- redhat keycloak, red hat migration toolkit for applications 6, migration toolkit for applications 7 +21 more +23 moreKeycloak: redirect_uri validation bypassCVE-2023-6291Fix available7.1 High
- infinispan, red hat data grid 8.4.4, jboss enterprise application platform 6 +3 more +5 moreInfinispan: non-admins should not be able to get cache config via rest apiCVE-2023-3629Fix available4.3 Medium
- infinispan, red hat data grid 8.4.4, jboss enterprise application platform 6 +3 more +5 moreInfispan: rest bulk ops don't check permissionsCVE-2023-3628Fix available6.5 Medium
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: xml external entity (xxe) injectionCVE-2022-4245Fix available4.3 Medium
- codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 moreCodehaus-plexus: directory traversalCVE-2022-4244Public exploitFix available7.5 High
- redhat drools, red hat build of apache camel for spring boot, build of quarkus +16 more +18 moreDrools: unsafe data deserialization in streamutilsCVE-2022-1415Fix available8.1 High
- redhat jboss enterprise application platform, red hat jboss enterprise application platform 6 for rhel 5, jboss enterprise application platform 6 for rhel 6 +4 more +6 moreJboss enterprise application platform: jboss eap: jbeap: jboss enterprise application platform: unauthorized ejb access via authorization module bypassCVE-2012-45505.3 Medium
- redhat jboss enterprise application platform, red hat jboss enterprise application platform 6 for rhel 5, jboss enterprise application platform 6 for rhel 6 +4 more +6 moreJboss enterprise application platform: org.jboss.as.ejb3: jboss enterprise application platform: access restriction bypass via improper ejb method authorizationCVE-2012-45496.5 Medium