Redhat Fuse vulnerabilities

• apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +3 more +5 more Apache CXF: JNDI Injection vulnerability in DispatchMDBMessageListenerImpl CVE-2026-50633 Fix available 8.1 HighJune 12, 2026
• apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +8 more +10 more Apache CXF: JNDI Injection Vulnerability in JMSConfigFactory CVE-2026-50632 Fix available 8.1 HighJune 12, 2026
• apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +5 more +7 more Apache CXF: OAuth2: Inverted IP Binding Check Defeats Security Control CVE-2026-50628 Fix available 9.8 CriticalJune 12, 2026
• apache cxf, red hat build of apache camel 4.18.1.p1 for spring boot 3.5.16, fuse 7 +5 more +7 more Apache CXF: OAuth2: Missing JWT Audience and Issuer Validation in Access Token Validator CVE-2026-50627 Fix available 9.1 CriticalJune 12, 2026
• apache cxf, red hat build of apache camel 4 for quarkus 3, build of apache camel 4.18 for quarkus 3.33 +12 more +14 more Apache CXF: XML External Entity (XXE) Injection in W3CMultiSchemaFactory and EndpointReferenceUtils CVE-2026-49875 Fix available 9.8 CriticalJune 12, 2026
• spring for apache kafka, vmware spring for apache kafka, red hat fuse 7 +2 more +4 more In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization CVE-2026-41731 Fix available 8.1 HighJune 9, 2026
• redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4 +21 more +23 more Undertow: undertow: request smuggling via malformed http request headers CVE-2026-28369 Fix available 8.7 HighMarch 27, 2026
• redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4 +20 more +22 more Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator CVE-2026-28367 Fix available 8.7 HighMarch 27, 2026
• redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4 +21 more +23 more Undertow: undertow: request smuggling via inconsistent header parsing CVE-2026-28368 Fix available 8.7 HighMarch 27, 2026
• redhat fuse, red hat fuse 7 +1 more Fuse: privilege escalation via excessive /etc/passwd permissions CVE-2025-57849 6.4 MediumMarch 13, 2026
• redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel 4.14.4 for spring boot 3.5.11 +33 more +35 more Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf CVE-2025-12543 Fix available 9.6 CriticalJanuary 7, 2026
• redhat undertow, red hat build of apache camel - hawtio 4, build of apache camel 4.14.2 for spring boot 3.5.8 +32 more +34 more Undertow: undertow madeyoureset http/2 ddos vulnerability CVE-2025-9784 Public exploitFix available 7.5 HighSeptember 2, 2025
• red hat hawtio 4.0.0 for red hat build of apache camel 4, build of apache camel 3.20.7 for spring boot, build of apache camel 4.4.2 for spring boot +26 more +28 more Undertow: improper state management in proxy protocol parsing causes information leakage CVE-2024-7885 Fix available 7.5 HighAugust 21, 2024
• netapp active iq unified manager, oncommand workflow automation, red hat openshift serverless +35 more +37 more Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol CVE-2024-1635 Fix available 7.5 HighFebruary 19, 2024
• eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• redhat undertow, netapp oncommand workflow automation, red hat eap 7.4.10 release +31 more +33 more Undertow: infinite loop in sslconduit during close CVE-2023-1108 Fix available 7.5 HighApril 7, 2023
• red hat undertow, redhat build of quarkus, integration camel for spring boot +7 more +9 more Undertow client not checking server identity presented by server certificate in https connections CVE-2022-4492 Fix available 7.5 HighFebruary 23, 2023
• red hat undertow, netapp active iq unified manager, cloud secure agent +6 more +8 more A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the... CVE-2022-2764 Fix available 4.9 MediumSeptember 1, 2022
• red hat undertow, redhat integration camel k, jboss fuse +2 more Undertow vulnerable to Dos via Large AJP request CVE-2022-2053 Fix available 7.5 HighAugust 5, 2022
• red hat undertow, redhat fuse, integration camel k +4 more +6 more Undertow vulnerable to memory exhaustion due to buffer leak CVE-2021-3690 Fix available 7.5 HighJuly 15, 2022
• redhat a-mq streams, build of quarkus, descision manager +6 more +8 more fabric8 kubernetes-client vulnerable CVE-2021-4178 Public exploitFix available 6.7 MediumJuly 15, 2022
• red hat undertow, netapp active iq unified manager, oncommand insight +5 more +7 more undertow Race Condition vulnerability CVE-2021-3597 Fix available 5.9 MediumMay 24, 2022
• apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 more Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• redhat wildfly elytron, quarkus, redhat build of quarkus +11 more +13 more Observable Discrepancy in Wildfly Elytron CVE-2021-3642 Fix available 5.3 MediumAugust 5, 2021
• redhat xnio, oracle communications cloud native core console, communications cloud native core network repository function +11 more +13 more Uncontrolled Resource Consumption in XNIO CVE-2020-14340 Fix available 5.9 MediumJune 2, 2021
• red hat resteasy, redhat fuse, jboss enterprise application platform +1 more +3 more Cross-site scripting in RESTEasy CVE-2020-10688 Fix available 6.1 MediumMay 27, 2021
• redhat kubernetes-client, a-mq online, build of quarkus +6 more +8 more Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client CVE-2021-20218 Fix available 7.4 HighMarch 16, 2021
• red hat undertow, redhat jboss fuse, openshift application runtimes +2 more Denial of service in Undertow CVE-2020-27782 Fix available 7.5 HighFebruary 23, 2021
• keycloak, redhat openshift application runtimes, single sign-on +1 more +3 more OIDC Logout redirect in keycloak CVE-2020-10734 Fix available 3.3 LowFebruary 11, 2021
• keycloak, redhat jboss fuse, openshift application runtimes +1 more +3 more Generation of Error Message Containing Sensitive Information in Keycloak CVE-2020-1717 2.7 LowFebruary 11, 2021
• redhat wildfly, netapp active iq unified manager, oncommand insight +8 more +10 more Uncontrolled Resource Consumption in WildFly CVE-2020-25689 Fix available 5.3 MediumOctober 30, 2020
• redhat wildfly openssl, netapp oncommand insight, oncommand workflow automation +7 more +9 more Wildfly-OpenSSL memory leak flaw CVE-2020-25644 Fix available 7.5 HighOctober 6, 2020
• redhat wildfly elytron, netapp oncommand insight, redhat codeready studio +4 more +6 more Session Fixation in WildFly Elytron CVE-2020-10714 Fix available 7.5 HighSeptember 23, 2020
• red hat wildfly, redhat jboss fuse +1 more A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed... CVE-2020-10718 Fix available 7.5 HighSeptember 16, 2020
• red hat wildfly, redhat amq, jboss-ejb-client +4 more +6 more Wildfly EJB Client causes DoS CVE-2020-14297 Fix available 6.5 MediumJuly 24, 2020
• red hat wildfly, redhat amq, jboss enterprise application platform continuous delivery +3 more +5 more A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat... CVE-2020-14307 6.5 MediumJuly 24, 2020
• hibernate orm, quarkus, redhat build of quarkus +7 more +9 more SQL Injection in Hibernate ORM CVE-2019-14900 Public exploitFix available 6.5 MediumJuly 6, 2020
• red hat undertow, netapp active iq unified manager, oncommand insight +5 more +7 more HTTP Request Smuggling in Undertow CVE-2020-10719 Fix available 6.5 MediumMay 26, 2020
• keycloak, quarkus, redhat decision manager +4 more +6 more Improper Input Validation in Keycloak CVE-2020-1714 Fix available 7.5 HighMay 13, 2020
• keycloak, redhat jboss fuse, openshift application runtimes +2 more Improper Authentication for Keycloak CVE-2020-1718 Fix available 7.1 HighMay 12, 2020
• red hat undertow, redhat jboss data grid, jboss enterprise application platform +3 more +5 more Improper Input Validation in Undertow CVE-2020-1757 Fix available 8.1 HighApril 21, 2020
• red hat wildfly, redhat jboss data grid, jboss enterprise application platform +3 more +5 more Inadequate Encryption Strength and Algorithm Downgrade in Wildfly CVE-2019-14887 7.4 HighMarch 16, 2020
• fasterxml jackson-databind, apache geode, redhat decision manager +5 more +7 more Polymorphic deserialization of malicious object in jackson-databind CVE-2019-14892 Fix available 7.5 HighMarch 2, 2020
• red hat undertow, netapp active iq unified manager, redhat jboss data grid +3 more +5 more Undertow vulnerable to Uncontrolled Resource Consumption CVE-2019-14888 Fix available 7.5 HighJanuary 23, 2020
• keycloak, redhat jboss enterprise application platform, jboss fuse +1 more +3 more Exposure of Sensitive Information to an Unauthorized Actor in Keycloak CVE-2019-14820 Fix available 4.3 MediumJanuary 8, 2020
• smartbear swagger-ui, redhat jboss fuse, openshift +2 more Improper Neutralization of Input During Web Page Generation in swagger-ui CVE-2016-1000229 Public exploitFix available 6.1 MediumDecember 20, 2019
• [unknown] infinispan, netapp active iq unified manager, redhat fuse +4 more +6 more Use of Externally-Controlled Input to Select Classes or Code in Infinispan CVE-2019-10174 Fix available 7.5 HighNovember 25, 2019
• fasterxml jackson-mapper-asl, apache spark, debian linux +2 more +4 more Improper Restriction of XML External Entity Reference in jackson-mapper-asl CVE-2019-10172 Public exploitFix available EPSS 17.0% 5.9 MediumNovember 18, 2019
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• [unknown] syndesis, redhat fuse +1 more It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow... CVE-2019-14860 7.4 HighNovember 8, 2019
• Show olderLoading…