Redhat Integration vulnerabilities

• red hat hawtio 4.0.0 for red hat build of apache camel 4, build of apache camel 3.20.7 for spring boot, build of apache camel 4.4.2 for spring boot +26 more +28 more Undertow: improper state management in proxy protocol parsing causes information leakage CVE-2024-7885 Fix available 7.5 HighAugust 21, 2024
• netapp active iq unified manager, oncommand workflow automation, red hat openshift serverless +35 more +37 more Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol CVE-2024-1635 Fix available 7.5 HighFebruary 19, 2024
• codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 more Codehaus-plexus: xml external entity (xxe) injection CVE-2022-4245 Fix available 4.3 MediumSeptember 25, 2023
• codehaus-plexus plexus-utils, red hat a-mq clients 2, a-mq online +28 more +30 more Codehaus-plexus: directory traversal CVE-2022-4244 Public exploitFix available 7.5 HighSeptember 25, 2023
• quarkus, red hat openshift serverless 1 on rhel 8, build of optaplanner 8 +20 more +22 more Quarkus: http security policy bypass CVE-2023-4853 Fix available 8.1 HighSeptember 20, 2023
• eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2023-44487 In KEVPublic exploitFix available EPSS 100.0% 7.5 HighJuly 10, 2023
• redhat undertow, netapp oncommand workflow automation, red hat eap 7.4.10 release +31 more +33 more Undertow: infinite loop in sslconduit during close CVE-2023-1108 Fix available 7.5 HighApril 7, 2023
• red hat undertow, redhat build of quarkus, integration camel for spring boot +7 more +9 more Undertow client not checking server identity presented by server certificate in https connections CVE-2022-4492 Fix available 7.5 HighFebruary 23, 2023
• postgresql, fedoraproject fedora, redhat enterprise linux +3 more +5 more In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the... CVE-2022-41862 Fix available 3.7 LowFebruary 10, 2023
• red hat wildfly, redhat amq, amq online +5 more +7 more WildFly vulnerable to Insecure Default Initialization of Resource CVE-2022-1278 Fix available 7.5 HighSeptember 13, 2022
• red hat undertow, netapp active iq unified manager, cloud secure agent +6 more +8 more A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the... CVE-2022-2764 Fix available 4.9 MediumSeptember 1, 2022
• red hat undertow, netapp active iq unified manager, cloud secure agent +7 more +9 more A flaw was found in Undertow. A potential security issue in flow control handling by the browser... CVE-2022-1259 7.5 HighAugust 31, 2022
• redhat xnio, integration camel k, integration camel quarkus +1 more +3 more XNIO `notifyReadClosed` method logging message to unexpected end CVE-2022-0084 Fix available 7.5 HighAugust 26, 2022
• red hat undertow, redhat integration camel k, jboss fuse +2 more Undertow vulnerable to Dos via Large AJP request CVE-2022-2053 Fix available 7.5 HighAugust 5, 2022
• red hat undertow, redhat fuse, integration camel k +4 more +6 more Undertow vulnerable to memory exhaustion due to buffer leak CVE-2021-3690 Fix available 7.5 HighJuly 15, 2022
• redhat a-mq streams, build of quarkus, descision manager +6 more +8 more fabric8 kubernetes-client vulnerable CVE-2021-4178 Public exploitFix available 6.7 MediumJuly 15, 2022
• red hat undertow, netapp active iq unified manager, oncommand insight +5 more +7 more Undertow Uncontrolled Resource Consumption CVE-2021-3629 Fix available 5.9 MediumMay 24, 2022
• apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 more Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• redhat wildfly elytron, quarkus, redhat build of quarkus +11 more +13 more Observable Discrepancy in Wildfly Elytron CVE-2021-3642 Fix available 5.3 MediumAugust 5, 2021
• red hat resteasy, netapp oncommand insight, redhat integration camel k +2 more RESTEasy 4.5.5.Final in hash flooding CVE-2020-14326 Fix available 7.5 HighJune 2, 2021
• red hat wildfly, redhat build of quarkus, data grid +6 more +8 more Cross-site Scripting in Wildfly CVE-2021-3536 Fix available 4.8 MediumMay 20, 2021
• redhat kubernetes-client, a-mq online, build of quarkus +6 more +8 more Improper Limitation of a Pathname to a Restricted Directory in Fabric8 Kubernetes Client CVE-2021-20218 Fix available 7.4 HighMarch 16, 2021