All products

Red Hat JBoss Fuse 6/Karaf

Red Hat · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Karaf vulnerable to potential code injectionCVE-2022-40145 · GHSA-C2P4-8MVV-RWMV org.apache.karaf:apache-karafRed Hat JBoss A-MQ 6/karaf MavenRed Hat Critical Fix reported
Spring Security and Spring Framework may not recognize certain paths that should be protectedCVE-2016-5007 · GHSA-8CRV-49FR-2H6J org.springframework.security:spring-security-coreorg.springframework:spring-core MavenRed Hat High Fix reported
Improper Limitation of a Pathname to a Restricted Directory in Jboss EAP UndertowCVE-2018-1048 · GHSA-PRFW-3QX6-G9XR org.jboss.eap:wildfly-undertowRed Hat Fuse 7/Karaf MavenRed Hat High Fix reported
Fuse-6: JMX endpoint deserializes untrusted credentials.CVE-2016-8653 Red Hat JBoss A-MQ 6/KarafRed Hat JBoss Fuse 6/Karaf Red Hat Medium No fix reported