Redhat Decision Manager vulnerabilities

• quarkus, red hat openshift serverless 1 on rhel 8, build of optaplanner 8 +20 more +22 more Quarkus: http security policy bypass CVE-2023-4853 Fix available 8.1 HighSeptember 20, 2023
• eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• redhat undertow, netapp oncommand workflow automation, red hat eap 7.4.10 release +31 more +33 more Undertow: infinite loop in sslconduit during close CVE-2023-1108 Fix available 7.5 HighApril 7, 2023
• redhat drools, red hat build of apache camel for spring boot, build of quarkus +16 more +18 more Drools: unsafe data deserialization in streamutils CVE-2022-1415 Fix available 8.1 HighFebruary 10, 2023
• red hat business-central, redhat decision manager, process automation +2 more A flaw was found in the RHDM, where an authenticated attacker can change their assigned role in... CVE-2019-14841 8.8 HighOctober 17, 2022
• red hat business-central, redhat decision manager +1 more A flaw was found in the RHDM, where sensitive HTML form fields like Password has auto-complete... CVE-2019-14840 7.5 HighOctober 17, 2022
• red hat wildfly, redhat wildfly elytron, decision manager +1 more +3 more Incorrect Authorization in WildFly Elytron CVE-2020-1748 Fix available 7.5 HighSeptember 16, 2020
• hibernate orm, quarkus, redhat build of quarkus +7 more +9 more SQL Injection in Hibernate ORM CVE-2019-14900 Public exploitFix available 6.5 MediumJuly 6, 2020
• keycloak, quarkus, redhat decision manager +4 more +6 more Improper Input Validation in Keycloak CVE-2020-1714 Fix available 7.5 HighMay 13, 2020
• red hat business-central, redhat decision manager, process automation manager +2 more A vulnerability was found in business-central, as shipped in rhdm-7.5.1 and rhpam-7.5.1, where... CVE-2019-14886 4.6 MediumMarch 5, 2020
• fasterxml jackson-databind, apache geode, redhat decision manager +5 more +7 more Polymorphic deserialization of malicious object in jackson-databind CVE-2019-14892 Fix available 7.5 HighMarch 2, 2020
• postgresql, redhat decision manager, enterprise linux +1 more +3 more A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub... CVE-2020-1720 Fix available 3.1 LowFebruary 13, 2020
• knockoutjs knockout, oracle business intelligence, goldengate +2 more +4 more XSS in knockout CVE-2019-14862 Fix available 6.1 MediumJanuary 2, 2020
• angularjs, red hat angular:, redhat decision manager +1 more +3 more Cross-Site Scripting via JSONP CVE-2019-14863 Fix available 7.1 HighJune 27, 2019
• fasterxml jackson-databind, debian linux, fedoraproject fedora +8 more +10 more Deserialization of Untrusted Data CVE-2018-12023 Fix available 7.5 HighMarch 4, 2019
• fasterxml jackson-databind, debian linux, fedoraproject fedora +8 more +10 more jackson-databind Deserialization of Untrusted Data vulnerability CVE-2018-12022 Fix available 7.5 HighMarch 4, 2019
• fasterxml jackson-databind, debian linux, oracle business process management suite +9 more +11 more com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data CVE-2018-19362 Fix available EPSS 10.6% 9.8 CriticalJanuary 2, 2019
• fasterxml jackson-databind, debian linux, oracle business process management suite +9 more +11 more Deserialization of Untrusted Data in jackson-databind CVE-2018-19361 Fix available EPSS 10.6% 9.8 CriticalJanuary 2, 2019
• fasterxml jackson-databind, debian linux, oracle business process management suite +9 more +11 more Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization CVE-2018-19360 Fix available EPSS 10.6% 9.8 CriticalJanuary 2, 2019
• redhat jbpm, kie jbpm-designer, redhat decision manager +1 more +3 more XML External Entity Reference in jbpmmigration CVE-2017-7545 6.5 MediumJuly 26, 2018