Skip to contentRedhat Openshift Application Runtimes vulnerabilities
- redhat undertow, netapp oncommand workflow automation, red hat eap 7.4.10 release +31 more +33 moreUndertow: infinite loop in sslconduit during closeCVE-2023-1108Fix available7.5 High
- red hat undertow, netapp active iq unified manager, cloud secure agent +4 more +6 moreA flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response...CVE-2022-1319Fix available7.5 High
- red hat undertow, netapp active iq unified manager, cloud secure agent +7 more +9 moreA flaw was found in Undertow. A potential security issue in flow control handling by the browser...CVE-2022-12597.5 High
- redhat smallrye health, build of quarkus, openshift application runtimes +2 moreSmallRye Health UI Cross-site Scripting vulnerabilityCVE-2021-3914Fix available6.1 Medium
- red hat undertow, redhat fuse, integration camel k +4 more +6 moreUndertow vulnerable to memory exhaustion due to buffer leakCVE-2021-3690Fix available7.5 High
- redhat a-mq streams, build of quarkus, descision manager +6 more +8 morefabric8 kubernetes-client vulnerableCVE-2021-4178Public exploitFix available6.7 Medium
- red hat undertow, netapp active iq unified manager, oncommand insight +5 more +7 moreundertow Race Condition vulnerabilityCVE-2021-3597Fix available5.9 Medium
- apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 moreDeserialization of untrusted data in JMSAppender in Apache Log4j 1.2CVE-2021-4104Public exploitFix availableEPSS 80.6%7.5 High
- redhat wildfly elytron, quarkus, redhat build of quarkus +11 more +13 moreObservable Discrepancy in Wildfly ElytronCVE-2021-3642Fix available5.3 Medium
- red hat resteasy, redhat fuse, jboss enterprise application platform +1 more +3 moreCross-site scripting in RESTEasyCVE-2020-10688Fix available6.1 Medium
- red hat undertow, redhat jboss fuse, openshift application runtimes +2 moreDenial of service in UndertowCVE-2020-27782Fix available7.5 High
- keycloak, redhat openshift application runtimes, single sign-on +1 more +3 moreOIDC Logout redirect in keycloakCVE-2020-10734Fix available3.3 Low
- keycloak, redhat jboss fuse, openshift application runtimes +1 more +3 moreGeneration of Error Message Containing Sensitive Information in KeycloakCVE-2020-17172.7 Low
- redhat wildfly, netapp active iq unified manager, oncommand insight +8 more +10 moreUncontrolled Resource Consumption in WildFlyCVE-2020-25689Fix available5.3 Medium
- redhat jboss enterprise application platform, openshift application runtimes, single sign-on +2 moreA flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy...CVE-2020-142996.5 Medium
- redhat wildfly openssl, netapp oncommand insight, oncommand workflow automation +7 more +9 moreWildfly-OpenSSL memory leak flawCVE-2020-25644Fix available7.5 High
- keycloak, redhat openshift application runtimes, single sign-on +2 moreAllocation of Resources Without Limits or Throttling in KeycloakCVE-2020-10758Fix available7.5 High
- red hat, inc. jboss enterprise application platform, redhat jboss data grid, openshift application runtimes +1 more +3 moreThe issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to...CVE-2020-17105.3 Medium
- red hat wildfly, redhat amq, jboss-ejb-client +4 more +6 moreWildfly EJB Client causes DoSCVE-2020-14297Fix available6.5 Medium
- red hat wildfly, redhat amq, jboss enterprise application platform continuous delivery +3 more +5 moreA vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat...CVE-2020-143076.5 Medium
- red hat undertow, netapp oncommand insight, redhat jboss enterprise application platform +1 more +3 moreAllocation of Resources Without Limits or Throttling in UndertowCVE-2020-10705Fix available7.5 High
- red hat undertow, netapp active iq unified manager, oncommand insight +5 more +7 moreHTTP Request Smuggling in UndertowCVE-2020-10719Fix available6.5 Medium
- keycloak, quarkus, redhat decision manager +4 more +6 moreImproper Input Validation in KeycloakCVE-2020-1714Fix available7.5 High
- keycloak, redhat jboss fuse, openshift application runtimes +2 moreImproper Authentication for KeycloakCVE-2020-1718Fix available7.1 High
- keycloak, redhat openshift application runtimes, single sign-on +2 moreKeycloak Insufficient Session ExpiryCVE-2020-1724Fix available4.3 Medium
- red hat soteria, redhat jboss enterprise application platform, jboss enterprise application platform continuous delivery +1 more +3 moreA flaw was found in Soteria before 1.0.1, in a way that multiple requests occurring concurrently...CVE-2020-17324.2 Medium
- red hat undertow, redhat jboss data grid, jboss enterprise application platform +3 more +5 moreImproper Input Validation in UndertowCVE-2020-1757Fix available8.1 High
- red hat wildfly, redhat jboss data grid, jboss enterprise application platform +3 more +5 moreInadequate Encryption Strength and Algorithm Downgrade in WildflyCVE-2019-148877.4 High
- netty, debian linux, fedoraproject fedora +3 more +5 moreHTTP Request Smuggling in NettyCVE-2020-7238Fix available7.5 High
- [unknown] infinispan, netapp active iq unified manager, redhat fuse +4 more +6 moreUse of Externally-Controlled Input to Select Classes or Code in InfinispanCVE-2019-10174Fix available7.5 High
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- red hat undertow, netapp active iq unified manager, redhat jboss data grid +4 more +6 morePotential to access user credentials from the log files when debug logging enabledCVE-2019-10212Fix available4.8 Medium
- red hat undertow, netapp active iq unified manager, redhat jboss data grid +3 more +5 moreUndertow Missing Authorization when requesting a protected directory without trailing slashCVE-2019-10184Fix available5.3 Medium
- red hat undertow, netapp active iq unified manager, redhat jboss data grid +3 more +5 moreCredential exposure through log files in UndertowCVE-2019-3888Fix available5.3 Medium