Security
فارسی
All products

Red Hat JBoss Fuse 6/undertow

Red Hat · Package
32 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Undertow denial of service vulnerabilityCVE-2023-1108 · GHSA-M4MM-PG93-FV78 io.undertow:undertow-coreRed Hat Integration Camel K 1/undertow MavenRed Hat High Fix reported
HTTP/2 Stream Cancellation AttackCVE-2023-44487 · GHSA-QPPJ-FM5R-HXR3 golang.org/x/netcom.typesafe.akka:akka-http-core GoMavenRed HatSwift Medium Fix reported
Undertow Uncontrolled Resource ConsumptionCVE-2021-3629 · GHSA-RF6Q-VX79-MJXR io.undertow:undertow-coreRed Hat Integration Camel K 1/undertow MavenRed Hat High Fix reported
Undertow client not checking server identity presented by server certificate in https connectionsCVE-2022-4492 · GHSA-PFCC-3G6R-8RG8 io.undertow:undertow-coreRed Hat Data Grid 8/undertow MavenRed Hat Critical Fix reported
Undertow Path Traversal vulnerabilityCVE-2024-1459 · GHSA-V76W-3PH8-VM66 io.undertow:undertow-coreRed Hat Data Grid 8/undertow MavenRed Hat Medium Fix reported
golang.org/x/net/http vulnerable to a reset floodCVE-2019-9514 · GHSA-39QC-96H7-956F golang.org/x/netRed Hat AMQ Broker 7/jetty GoRed Hat High Fix reported
golang.org/x/net/http vulnerable to ping floodsCVE-2019-9512 · GHSA-HGR8-6H9X-F7Q9 golang.org/x/netRed Hat AMQ Broker 7/jetty GoRed Hat High Fix reported
Undertow vulnerable to denial of serviceCVE-2023-3223 · GHSA-65H2-WF7M-Q2V8 io.undertow:undertow-parentRed Hat Decision Manager 7/undertow MavenRed Hat High Fix reported
Undertow vulnerable to Uncontrolled Resource ConsumptionCVE-2019-14888 · GHSA-VJXC-FRW4-JMH5 io.undertow:undertow-coreRed Hat JBoss Fuse 6/undertow MavenRed Hat High Fix reported
Undertow vulnerable to Denial of Service (DoS) attacksCVE-2021-3859 · GHSA-339Q-62WM-C39W io.undertow:undertow-coreRed Hat JBoss Data Grid 7/undertow MavenRed Hat High Fix reported
Undertow Missing Authorization when requesting a protected directory without trailing slashCVE-2019-10184 · GHSA-W69W-JVC7-WJGV io.undertow:undertow-servletRed Hat JBoss Enterprise Application Platform 6/jbossweb MavenRed Hat High Fix reported
Improper Authorization in UndertoeCVE-2020-1745 · GHSA-GV2W-88HX-8M9R io.undertow:undertow-coreRed Hat JBoss Fuse 6/undertow MavenRed Hat High Fix reported
HTTP request smuggling in UndertowCVE-2021-20220 · GHSA-QJWC-V72V-FQ6R io.undertow:undertow-coreRed Hat JBoss Data Grid 7/wildfly-undertow MavenRed Hat Medium Fix reported
undertow Race Condition vulnerabilityCVE-2021-3597 · GHSA-MFHV-GWF8-4M88 io.undertow:undertow-coreRed Hat JBoss Data Grid 7/undertow MavenRed Hat Medium Fix reported
Undertow vulnerable to memory exhaustion due to buffer leakCVE-2021-3690 · GHSA-FJ7C-VG2V-CCRM io.undertow:undertow-coreRed Hat Integration Camel K 1/undertow MavenRed Hat High Fix reported
Credential exposure through log files in UndertowCVE-2019-3888 · GHSA-JWGX-9MMH-684W io.undertow:undertow-coreRed Hat JBoss Fuse 6/undertow MavenRed Hat Critical Fix reported
Potential to access user credentials from the log files when debug logging enabledCVE-2019-10212 · GHSA-8VH8-VC28-M2HF io.undertow:undertow-coreRed Hat Fuse 7/undertow MavenRed Hat Critical Fix reported
Undertow vulnerable to Dos via Large AJP requestCVE-2022-2053 · GHSA-95RF-557X-44G5 io.undertow:undertow-coreRed Hat Data Grid 8/undertow MavenRed Hat High Fix reported
Denial of service in UndertowCVE-2020-27782 · GHSA-RHCW-WJCM-9H6G io.undertow:undertow-coreRed Hat Integration Camel K 1/undertow MavenRed Hat High Fix reported
Improper Input Validation in UndertowCVE-2020-1757 · GHSA-2W73-FQQJ-C92P io.undertow:undertow-coreRed Hat JBoss Enterprise Application Platform 6/undertow MavenRed Hat High Fix reported