Aller au contenu

Vulnérabilités de Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-6162 A vulnerability was found in Undertow, where URL-encoded request paths can be mishandled during concurrent requests on… 7.5 Élevée 20 juin 2024
CVE-2024-4029 A vulnerability was found in Wildfly’s management interface 4.1 Moyenne 2 mai 2024
CVE-2024-1102 A vulnerability was found in jberet-core logging 6.5 Moyenne 25 avr. 2024
CVE-2023-6717 Keycloak: xss via assertion consumer service url in saml post-binding flow 6.0 Moyenne 25 avr. 2024
CVE-2024-1249 Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos 7.4 Élevée 17 avr. 2024
CVE-2023-6236 A flaw was found in Red Hat Enterprise Application Platform 8 7.3 Élevée 10 avr. 2024
CVE-2024-1233 A flaw was found in` JwtValidator.resolvePublicKey` in JBoss EAP, where the validator checks jku and sends a HTTP… 7.3 Élevée 9 avr. 2024
CVE-2024-1300 Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support 5.4 Moyenne 2 avr. 2024
CVE-2024-1023 Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx 6.5 Moyenne 27 mars 2024
CVE-2023-5685 Xnio: stackoverflowexception when the chain of notifier states becomes problematically big 7.5 Élevée 22 mars 2024
CVE-2023-4503 An improper initialization vulnerability was found in Galleon 6.8 Moyenne 6 févr. 2024
CVE-2023-5236 A flaw was found in Infinispan, which does not detect circular object references when unmarshalling 4.4 Moyenne 18 déc. 2023
CVE-2023-3223 A flaw was found in undertow 7.5 Élevée 27 sept. 2023
CVE-2022-4245 A flaw was found in codehaus-plexus 4.3 Moyenne 25 sept. 2023
CVE-2022-4244 A flaw was found in codeplex-codehaus 7.5 Élevée 25 sept. 2023
CVE-2023-1108 A flaw was found in undertow 7.5 Élevée 14 sept. 2023
CVE-2022-1415 A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data 8.1 Élevée 11 sept. 2023
CVE-2012-3427 A flaw was found in JBoss Enterprise Application Platform (EAP) and EC2 Amazon Machine Image (AMI) 5.5 Moyenne 2 févr. 2014
CVE-2012-4550 A flaw was found in JBoss Enterprise Application Platform 5.3 Moyenne 5 janv. 2013
CVE-2012-4549 A flaw was found in JBoss Enterprise Application Platform 6.5 Moyenne 5 janv. 2013

Autres produits Red Hat