Security
فارسی
All products

Red Hat JBoss Enterprise Application Platform 6/jboss-on

Red Hat · Package
18 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Snakeyaml vulnerable to Stack overflow leading to denial of serviceCVE-2022-41854 · GHSA-W37G-RHQ8-7M4J org.yaml:snakeyamlA-MQ Clients 2/dev-java-snakeyaml MavenRed Hat Medium Fix reported
Jettison parser crash by stackoverflowCVE-2022-40149 · GHSA-56H3-78GP-V83R org.codehaus.jettison:jettisonLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 MavenRed Hat Medium Fix reported
Jettison vulnerable to infinite recursionCVE-2023-1436 · GHSA-Q6G2-G7F3-RR83 org.codehaus.jettison:jettisonLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 MavenRed Hat High Fix reported
jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNodeCVE-2021-46877 · GHSA-3X8X-79M2-3W2W com.fasterxml.jackson.core:jackson-databindCryostat 2/jackson-databind MavenRed Hat High Fix reported
Uncontrolled Resource Consumption in Jackson-databindCVE-2022-42003 · GHSA-JJJH-JJXP-WPFF com.fasterxml.jackson.core:jackson-databindRed Hat Enterprise Linux 8/jackson-databind MavenRed Hat High Fix reported
Jettison Out-of-bounds Write vulnerabilityCVE-2022-45685 · GHSA-7RF3-MQPX-H7XG org.codehaus.jettison:jettisonOpenShift Developer Tools and Services/jenkins-2-plugins MavenRed Hat High Fix reported
Jettison Out-of-bounds Write vulnerabilityCVE-2022-45693 · GHSA-GRR4-WV38-F68W org.codehaus.jettison:jettisonMigration Toolkit for Runtimes/org.keycloak-keycloak-parent MavenRed Hat High Fix reported
Jettison memory exhaustionCVE-2022-40150 · GHSA-X27M-9W8J-5VCW org.codehaus.jettison:jettisonLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 MavenRed Hat High Fix reported
Uncontrolled Resource Consumption in FasterXML jackson-databindCVE-2022-42004 · GHSA-RGV9-Q543-RQG4 com.fasterxml.jackson.core:jackson-databindRed Hat Enterprise Linux 8/jackson-databind MavenRed Hat High Fix reported
snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds WriteCVE-2022-38751 · GHSA-98WM-3W3Q-MW94 org.yaml:snakeyamlOpenShift Developer Tools and Services/jenkins-2-plugins MavenRed Hat Medium Fix reported
snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds WriteCVE-2022-38750 · GHSA-HHHW-99GJ-P3C3 org.yaml:snakeyamlOpenShift Developer Tools and Services/jenkins-2-plugins MavenRed Hat Medium Fix reported
snakeYAML before 1.31 vulnerable to Denial of Service due to Out-of-bounds WriteCVE-2022-38749 · GHSA-C4R9-R8FH-9VJ2 be.cylab:snakeyamlcom.alipay.sofa.acts:acts-common-util MavenRed Hat Medium Fix reported
snakeYAML before 1.32 vulnerable to Denial of Service due to Out-of-bounds WriteCVE-2022-38752 · GHSA-9W3M-GQGF-C4P9 org.yaml:snakeyamlOpenShift Developer Tools and Services/jenkins-2-plugins MavenRed Hat Medium Fix reported
XNIO `notifyReadClosed` method logging message to unexpected endCVE-2022-0084 · GHSA-76FG-MHRG-FMMG org.jboss.xnio:xnio-allRed Hat Integration Camel K 1/xnio MavenRed Hat High No fix reported
Apache CXF vulnerable to Exposure of Sensitive InformationCVE-2022-46363 · GHSA-3W37-5P3P-JV92 org.apache.cxf:cxf-coreMigration Toolkit for Runtimes/org.apache.cxf-cxf-api MavenRed Hat High Fix reported
Apache CXF Server-Side Request Forgery vulnerabilityCVE-2022-46364 · GHSA-X3X3-QWJQ-8GJ4 org.apache.cxf:cxf-coreRed Hat Data Grid 8/cxf MavenRed Hat Critical Fix reported
HyperSQL DataBase vulnerable to remote code execution when processing untrusted inputCVE-2022-41853 · GHSA-77XX-RXVH-Q682 org.hsqldb:hsqldbRed Hat Data Grid 8/hsqldb MavenRed Hat Critical Fix reported
Apache Cassandra vulnerable to Code Injection due to unsafe configurationCVE-2021-44521 · GHSA-8FFC-79XG-29W8 org.apache.cassandra:cassandra-allRed Hat Fuse 7/cassandra MavenRed Hat Critical Fix reported