Aller au contenu

Vulnérabilités de Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-45674 Netty is a network application framework for development of protocol servers and clients 8.7 Élevée 12 juin 2026
CVE-2026-45416 Netty is a network application framework for development of protocol servers and clients 7.5 Élevée 12 juin 2026
CVE-2026-44893 Netty is a network application framework for development of protocol servers and clients 7.5 Élevée 12 juin 2026
CVE-2026-50633 A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code… Non notée 12 juin 2026
CVE-2026-50632 A further incomplete fix for a previous advisory CVE-2026-44417 (Untrusted JMS configuration can lead to RCE) for Apache… Non notée 12 juin 2026
CVE-2026-50628 A logic error in OAuthRequestFilter rejects legitimate requests originating from the bound IP address, while blindly… Non notée 12 juin 2026
CVE-2026-50627 The JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' (Audience) claims of incoming JWT access… Non notée 12 juin 2026
CVE-2026-49875 Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary… Non notée 12 juin 2026
CVE-2026-44890 Netty is a network application framework for development of protocol servers and clients 7.5 Élevée 11 juin 2026
CVE-2026-44250 Netty is a network application framework for development of protocol servers and clients 7.5 Élevée 11 juin 2026
CVE-2026-44249 Netty is a network application framework for development of protocol servers and clients 8.1 Élevée 11 juin 2026
CVE-2026-11986 A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface… 4.9 Moyenne 11 juin 2026
CVE-2026-46625 JavaScript Cookie is a JavaScript API for handling cookies, client-side 7.5 Élevée 10 juin 2026
CVE-2026-41731 JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderMapper matched type headers against trusted packages using… 8.1 Élevée 9 juin 2026
CVE-2025-71319 image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block… 8.7 Élevée 9 juin 2026
CVE-2026-40984 In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service… 7.5 Élevée 9 juin 2026
CVE-2026-40983 In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service… 7.5 Élevée 9 juin 2026
CVE-2026-11577 A flaw was found in Keycloak 7.2 Élevée 8 juin 2026
CVE-2026-10805 Networkmanager: networkmanager: local privilege escalation via malformed mud urls in dhclient backend 6.7 Moyenne 4 juin 2026
CVE-2024-52011 launch-editor allows users to open files with line numbers in editor from Node.js 7.5 Élevée 1 juin 2026
CVE-2026-45292 opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing… 5.3 Moyenne 28 mai 2026
CVE-2026-44417 The fix for CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE was not complete, meaning that… Non notée 22 mai 2026
CVE-2026-44930 An LDAP injection vulnerability in the LDAP Certificate repository of the XKMS server in Apache CXF may allow an… Non notée 22 mai 2026
CVE-2026-41292 NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to… 6.6 Moyenne 20 mai 2026
CVE-2026-47323 Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative… Non notée 19 mai 2026

Autres produits Red Hat