Security
فارسی
All products

Red Hat JBoss Enterprise Application Platform 6/jbossweb

Red Hat · Package
25 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Exposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2021-25122 · GHSA-J39C-C8HJ-X4J3 org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-coyote MavenRed Hat High Fix reported
Cross-site scripting in Apache TomcatCVE-2019-0221 · GHSA-JJPQ-GP5Q-8Q6W org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat-catalina MavenRed Hat Medium Fix reported
Uncontrolled Resource Consumption in Apache TomcatCVE-2020-11996 · GHSA-53HP-JPWQ-2JGQ org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat MavenRed Hat High Fix reported
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache TomcatCVE-2020-13934 · GHSA-VF77-8H7G-GGHP org.apache.tomcat:tomcat-coyoteorg.apache.tomcat:tomcat MavenRed Hat High Fix reported
Improper Limitation of a Pathname to a Restricted Directory in Apache TomcatCVE-2015-5345 · GHSA-RH8Q-VJGF-GF74 org.apache.tomcat:tomcatRed Hat JBoss BRMS 5/jbossweb MavenRed Hat Medium Fix reported
Improper Access Control in Apache TomcatCVE-2014-7810 · GHSA-4C43-CWVX-9CRH org.apache.tomcat:tomcatRed Hat JBoss Enterprise Application Platform 6/jbossweb MavenRed Hat Medium Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2020-17527 · GHSA-VVW4-RFWF-P6HX org.apache.tomcat:tomcat-coyoteRed Hat Enterprise Linux 8/pki-deps:10.6/pki-servlet-engine MavenRed Hat High Fix reported
Apache Tomcat EncryptInterceptor error leads to Uncontrolled Resource ConsumptionCVE-2022-29885 · GHSA-R84P-88G2-2VX2 org.apache.tomcat:tomcatRed Hat Decision Manager 7/tomcat MavenRed Hat High Fix reported
Information Disclosure in Apache TomcatCVE-2021-24122 · GHSA-2RVV-W9R2-RG7M org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Data Grid 6/jbossweb MavenRed Hat Medium Fix reported
Improper Verification of Source of a Communication Channel in Apache TomcatCVE-2016-0763 · GHSA-9HJV-9H75-XMPP org.apache.tomcat:tomcatRed Hat JBoss BRMS 5/jbossweb MavenRed Hat Medium Fix reported
Improper Neutralization of Input During Web Page Generation in Apache TomcatCVE-2015-5346 · GHSA-JRCP-C39H-R29X org.apache.tomcat:tomcatRed Hat JBoss BRMS 5/jbossweb MavenRed Hat High Fix reported
Apache Tomcat Open Redirect vulnerabilityCVE-2018-11784 · GHSA-5Q99-F34M-67GC org.apache.tomcat.embed:tomcat-embed-coreRed Hat JBoss Data Grid 6/jbossweb MavenRed Hat Medium Fix reported
Improper Access Control in Apache TomcatCVE-2016-0714 · GHSA-MV42-PX54-87JW org.apache.tomcat:tomcatRed Hat JBoss BRMS 5/jbossweb MavenRed Hat High Fix reported
Undertow Missing Authorization when requesting a protected directory without trailing slashCVE-2019-10184 · GHSA-W69W-JVC7-WJGV io.undertow:undertow-servletRed Hat JBoss Enterprise Application Platform 6/jbossweb MavenRed Hat High Fix reported
Potential HTTP request smuggling in Apache TomcatCVE-2019-17569 · GHSA-767J-JFH2-JVRC org.apache.tomcat.embed:tomcat-embed-coreorg.apache.tomcat:tomcat MavenRed Hat Medium Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2017-12616 · GHSA-8QQ4-8JVQ-MFW4 org.apache.tomcat:tomcat-catalinaRed Hat Enterprise Linux 6/tomcat6 MavenRed Hat High Fix reported
Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a tokenCVE-2015-5351 · GHSA-W7CG-5969-678W org.apache.tomcat:tomcatRed Hat JBoss BRMS 5/jbossweb MavenRed Hat High Fix reported
Potential to access user credentials from the log files when debug logging enabledCVE-2019-10212 · GHSA-8VH8-VC28-M2HF io.undertow:undertow-coreRed Hat Fuse 7/undertow MavenRed Hat Critical Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in UndertowCVE-2018-14642 · GHSA-VF6R-MMHC-3XCM io.undertow:undertow-coreRed Hat JBoss Enterprise Application Platform 6/jbossweb MavenRed Hat Medium Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2020-13943 · GHSA-F268-65QC-98VG org.apache.tomcat:tomcat-coyoteRed Hat Enterprise Linux 5/tomcat5 MavenRed Hat Medium Fix reported