Security
فارسی
All products

Red Hat JBoss Enterprise Application Platform 5/jbossas

Red Hat · Package
18 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Incorrect Authorization in WildFly ElytronCVE-2020-1748 · GHSA-QGRQ-CX4C-2RMM org.wildfly.security:wildfly-elytronRed Hat Fuse 7/wildfly MavenRed Hat High Fix reported
Denial of service in JBoss resteasyCVE-2016-6346 · GHSA-WXVR-VQFP-9CQW org.jboss.resteasy:resteasy-jaxrsRed Hat BPM Suite 6/resteasy MavenRed Hat High Fix reported
Improper Access Control in Apache TomcatCVE-2016-5388 · GHSA-V646-RX6W-R3QQ org.apache.tomcat:tomcat-catalinaRed Hat JBoss Enterprise Application Platform 5/jbossas MavenRed Hat High Fix reported
Wildfly-Core user account mismanagementCVE-2021-3717 · GHSA-P9XF-3RM3-QH2H org.wildfly.core:wildfly-core-parentRed Hat Data Grid 8/wildfly MavenRed Hat High Fix reported
JacksonJsonpInterceptor susceptible to cross-site script inclusion (XSSI) attackCVE-2016-6348 · GHSA-9XFC-J5MF-9W5P org.jboss.resteasy:resteasy-clientRed Hat BPM Suite 6/Build and Assembly MavenRed Hat Medium Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasyCVE-2016-6345 · GHSA-VXHJ-3X7P-JXP5 org.jboss.resteasy:resteasy-clientRed Hat BPM Suite 6/resteasy MavenRed Hat Medium Fix reported
Improper Neutralization of Input During Web Page Generation in RESTEasyCVE-2016-6347 · GHSA-R346-RMRG-QPGH org.jboss.resteasy:resteasy-clientRed Hat Enterprise Linux 7/resteasy-base MavenRed Hat Medium Fix reported
Wildfly has a memory leak vulnerabilityCVE-2020-27822 · GHSA-QX3P-9MMP-4V8H org.wildfly:wildfly-parentRed Hat JBoss Data Grid 7/wildfly MavenRed Hat Medium Fix reported
Wildfly Unsafe Deserialization VulnerabilityCVE-2020-10740 · GHSA-VRMW-2XHQ-HRMP org.wildfly:wildfly-parentRed Hat JBoss Data Virtualization 6/jbossas MavenRed Hat High Fix reported
Wildfly logs plaintext passwordsCVE-2020-25640 · GHSA-JW3V-5CH2-WFMM org.wildfly:wildfly-parentRed Hat JBoss Data Grid 7/wildfly MavenRed Hat Medium Fix reported
Privilege Context Switching Error in wildlfyCVE-2020-1719 · GHSA-P9CF-QJXQ-VXW6 org.wildfly.bom:wildflyRed Hat JBoss Data Virtualization 6/jbossas MavenRed Hat Medium Fix reported
PooledInvokerServlet is not secured, and deserializes dataCVE-2016-3690 Red Hat JBoss BRMS 5/jbossasRed Hat JBoss Enterprise Application Platform 4/jbossas Red Hat High No fix reported
JBoss EAP 5 JMX servlet deserializes Java objects sent via HTTPCVE-2016-7065 Red Hat JBoss Enterprise Application Platform 4/jbossasRed Hat JBoss Enterprise Application Platform 5/jbossas Red Hat Medium No fix reported
EAP-5: unsafe deserialization of user credentials by the JMX endpointCVE-2016-9585 Red Hat JBoss Enterprise Application Platform 5/jbossasRed Hat JBoss SOA Platform 5/jbossas Red Hat Low No fix reported
httpd: mod_mime buffer overreadCVE-2017-7679 Red Hat Enterprise Linux 5/httpdRed Hat JBoss Enterprise Application Platform 5/jbossas Red Hat Medium No fix reported
Soteria: security identity corruption across concurrent threadsCVE-2020-1732 Red Hat JBoss Data Virtualization 6/jbossasRed Hat JBoss Data Virtualization 6/wildfly Red Hat Low No fix reported
wildfly: The 'enabled-protocols' value in legacy security is not respected if OpenSSL security provider is in useCVE-2019-14887 Red Hat JBoss Data Grid 7/wildflyRed Hat JBoss Data Virtualization 6/jbossas Red Hat Medium No fix reported
wildfly: exposed setting of TCCL via the EmbeddedManagedProcess APICVE-2020-10718 Red Hat Fuse 7/wildflyRed Hat JBoss Data Grid 7/wildfly Red Hat Medium No fix reported