Aller au contenu

Vulnérabilités de Red Hat Red Hat AMQ Broker 7

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-96453 Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates 8.0 Élevée 5 nov. 2026
CVE-2026-93998 Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer 7.4 Élevée 5 nov. 2026
CVE-2026-101292 Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in… 8.2 Élevée 28 sept. 2026
CVE-2026-93562 A flaw was found in Netty's HTTP/1 decoder 6.5 Moyenne 18 sept. 2026
CVE-2026-93574 A flaw was found in Netty's `netty-codec-http` component 6.5 Moyenne 18 sept. 2026
CVE-2026-93579 Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough) 6.5 Moyenne 18 sept. 2026
CVE-2026-93573 A flaw was found in Netty's HTTP/1.1 decoder 6.5 Moyenne 18 sept. 2026
CVE-2026-93568 Io.netty/netty-codec-http2: io.netty/netty-codec-http3: netty: http/2 and http/3 extended connect requests are downgraded as regular connect requests 7.5 Élevée 18 sept. 2026
CVE-2026-93569 Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the request-target authority 8.2 Élevée 18 sept. 2026
CVE-2026-93567 Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority 7.5 Élevée 18 sept. 2026
CVE-2026-93566 A flaw was found in Netty 6.5 Moyenne 18 sept. 2026
CVE-2026-93565 A flaw was found in Netty RtspDecoder 7.5 Élevée 18 sept. 2026
CVE-2026-93564 A flaw was found in Netty 7.5 Élevée 18 sept. 2026
CVE-2026-93558 A flaw was found in Netty's WebSocketServerExtensionHandler 7.5 Élevée 18 sept. 2026
CVE-2026-93492 Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size 5.3 Moyenne 18 sept. 2026
CVE-2026-93491 A flaw was found in Netty's HttpServerCodec 7.5 Élevée 18 sept. 2026
CVE-2026-93488 A flaw was found in Netty 7.5 Élevée 18 sept. 2026
CVE-2026-93575 A flaw was found in Netty's MqttDecoder 7.5 Élevée 18 sept. 2026
CVE-2026-86404 EAP's Artemis deserialization configuration permits deserialization by default 8.8 Élevée 7 sept. 2026
CVE-2026-84218 A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient validation of client-controlled JMX service… 8.1 Élevée 1 sept. 2026
CVE-2026-13676 fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs 7.5 Élevée 29 juin 2026
CVE-2026-54513 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor 8.1 Élevée 23 juin 2026
CVE-2026-9697 Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or… 7.4 Élevée 17 juin 2026
CVE-2026-6734 Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying… 7.5 Élevée 17 juin 2026
CVE-2026-12151 Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but… 7.5 Élevée 17 juin 2026

Autres produits Red Hat