Redhat Jboss Middleware vulnerabilities

• redhat keycloak, red hat migration toolkit for runtimes 1 on rhel 8, mta-6.2-rhel-9 +26 more +28 more Keycloak: path transversal in redirection validation CVE-2024-1132 Fix available 8.1 HighApril 17, 2024
• red hat amq broker 7, rhel-8 based middleware containers, redhat jboss a-mq +2 more +4 more Operator: passwords defined in secrets shown in statefulset yaml CVE-2023-4066 5.5 MediumSeptember 27, 2023
• red hat amq broker 7, rhel-8 based middleware containers, redhat jboss a-mq +2 more +4 more Operator: plaintext password in operator log CVE-2023-4065 5.5 MediumSeptember 26, 2023
• quarkus, red hat openshift serverless 1 on rhel 8, build of optaplanner 8 +20 more +22 more Quarkus: http security policy bypass CVE-2023-4853 Fix available 8.1 HighSeptember 20, 2023
• redhat drools, red hat build of apache camel for spring boot, build of quarkus +16 more +18 more Drools: unsafe data deserialization in streamutils CVE-2022-1415 Fix available 8.1 HighFebruary 10, 2023
• hibernate orm, quarkus, redhat build of quarkus +7 more +9 more SQL Injection in Hibernate ORM CVE-2019-14900 Public exploitFix available 6.5 MediumJuly 6, 2020
• apache wss4j, red hat jbossws, apache cxf +8 more +10 more Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J CVE-2011-2487 Fix available 5.9 MediumMarch 11, 2020
• fasterxml jackson-databind, apache drill, debian linux +15 more +17 more Deserialization of untrusted data in FasterXML jackson-databind CVE-2019-14439 Public exploitFix available EPSS 10.8% 7.5 HighJuly 30, 2019
• apache kafka, oracle database, primavera p6 enterprise project portfolio management +2 more +4 more Improper Control of Generation of Code in Apache Kafka CVE-2018-1288 Fix available 5.4 MediumJuly 26, 2018
• apache tomcat, canonical ubuntu linux, debian linux +7 more +9 more Apache Tomcat unauthorized access vulnerability CVE-2018-1304 Public exploitFix available EPSS 17.1% 5.9 MediumFebruary 28, 2018
• xstream, debian linux, redhat fuse +1 more +3 more Denial of service in XStream CVE-2017-7957 Fix available 7.5 HighApril 29, 2017
• netty, apache cassandra, redhat jboss data grid +1 more +3 more Loop with Unreachable Exit Condition in Netty CVE-2016-4970 Fix available EPSS 11.3% 7.5 HighApril 13, 2017
• apache shiro, aurora, redhat fuse +1 more +3 more Improper Access Control in Apache Shiro CVE-2016-4437 In KEVPublic exploitFix available EPSS 93.0% 9.8 CriticalJune 7, 2016
• xstream, debian linux, fedoraproject fedora +1 more +3 more XML External Entity Injection in XStream CVE-2016-3674 Fix available 7.5 HighMay 5, 2016