Vulnerabilities of Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2024-6162 | A vulnerability was found in Undertow, where URL-encoded request paths can be mishandled during concurrent requests on… | 7.5 High | Jun 20, 2024 |
| CVE-2024-4029 | A vulnerability was found in Wildfly’s management interface | 4.1 Medium | May 2, 2024 |
| CVE-2024-1102 | A vulnerability was found in jberet-core logging | 6.5 Medium | Apr 25, 2024 |
| CVE-2023-6717 | Keycloak: xss via assertion consumer service url in saml post-binding flow | 6.0 Medium | Apr 25, 2024 |
| CVE-2024-1249 | Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos | 7.4 High | Apr 17, 2024 |
| CVE-2023-6236 | A flaw was found in Red Hat Enterprise Application Platform 8 | 7.3 High | Apr 10, 2024 |
| CVE-2024-1233 | A flaw was found in` JwtValidator.resolvePublicKey` in JBoss EAP, where the validator checks jku and sends a HTTP… | 7.3 High | Apr 9, 2024 |
| CVE-2024-1300 | Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support | 5.4 Medium | Apr 2, 2024 |
| CVE-2024-1023 | Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx | 6.5 Medium | Mar 27, 2024 |
| CVE-2023-5685 | Xnio: stackoverflowexception when the chain of notifier states becomes problematically big | 7.5 High | Mar 22, 2024 |
| CVE-2023-4503 | An improper initialization vulnerability was found in Galleon | 6.8 Medium | Feb 6, 2024 |
| CVE-2023-5236 | A flaw was found in Infinispan, which does not detect circular object references when unmarshalling | 4.4 Medium | Dec 18, 2023 |
| CVE-2023-3223 | A flaw was found in undertow | 7.5 High | Sep 27, 2023 |
| CVE-2022-4245 | A flaw was found in codehaus-plexus | 4.3 Medium | Sep 25, 2023 |
| CVE-2022-4244 | A flaw was found in codeplex-codehaus | 7.5 High | Sep 25, 2023 |
| CVE-2023-1108 | A flaw was found in undertow | 7.5 High | Sep 14, 2023 |
| CVE-2022-1415 | A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data | 8.1 High | Sep 11, 2023 |
| CVE-2012-3427 | A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI) | 5.5 Medium | Feb 2, 2014 |
| CVE-2012-4550 | A flaw was found in JBoss Enterprise Application Platform | 5.3 Medium | Jan 5, 2013 |
| CVE-2012-4549 | A flaw was found in JBoss Enterprise Application Platform | 6.5 Medium | Jan 5, 2013 |
Other Red Hat products
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433