| Denial of Service in Google GuavaCVE-2018-10237 · GHSA-MVR2-9PJ6-7W5J |
com.google.guava:guava-jdk5com.google.guava:guava |
MavenRed Hat |
Medium
|
Fix reported |
|
| Improper Restriction of XML External Entity Reference in jackson-mapper-aslCVE-2019-10172 · GHSA-R6J9-8759-G62W |
org.codehaus.jackson:jackson-mapper-aslRed Hat BPM Suite 6/jackson-mapper-asl |
MavenRed Hat |
High
|
No fix reported |
|
| Deserialization of Untrusted DataCVE-2018-12023 · GHSA-6WQP-V4V6-C87C |
com.fasterxml.jackson.core:jackson-databindRed Hat JBoss A-MQ 6/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| Deserialization of Untrusted Data in jackson-databindCVE-2018-19361 · GHSA-MX9V-GMH4-MGQW |
com.fasterxml.jackson.core:jackson-databindRed Hat JBoss A-MQ 6/jackson-databind |
MavenRed Hat |
Critical
|
Fix reported |
|
| XML External Entity Reference (XXE) in jackson-databindCVE-2018-14720 · GHSA-X2W5-5M2G-7H5M |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
Critical
|
Fix reported |
|
| Possible privilege escalation in org.springframework:spring-coreCVE-2018-1272 · GHSA-4487-X383-QPPH |
org.springframework:spring-coreRed Hat JBoss A-MQ 6/spring |
MavenRed Hat |
High
|
Fix reported |
|
| OpenDaylight Controller DoSCVE-2017-1000361 · GHSA-8P5X-W9CV-92HV |
org.opendaylight.controller:releasepomRed Hat OpenStack Platform 10 (Newton)/opendaylight |
MavenRed Hat |
High
|
No fix reported |
|
| Spring Framework Cross Site Tracing (XST)CVE-2018-11039 · GHSA-9GCM-F4X3-8JPW |
org.springframework:spring-webRed Hat JBoss BRMS 5/springframework |
MavenRed Hat |
Medium
|
Fix reported |
|
| OS Command Injection in Plexus-utilsCVE-2017-1000487 · GHSA-8VHQ-QQ4P-GRQ3 |
org.codehaus.plexus:plexus-utilsRed Hat Enterprise Linux 7/plexus-utils |
MavenRed Hat |
Critical
|
Fix reported |
|
| Moderate severity vulnerability that affects org.apache.commons:commons-compressCVE-2018-11771 · GHSA-HRMR-F5M6-M9PQ |
org.apache.commons:commons-compressJBoss Developer Studio 11/commons-compress |
MavenRed Hat |
Medium
|
Fix reported |
|
| Moderate severity vulnerability that affects org.springframework:spring-coreCVE-2018-11040 · GHSA-F26X-PR96-VW86 |
org.springframework:spring-coreRed Hat JBoss BRMS 5/springframework |
MavenRed Hat |
Medium
|
Fix reported |
|
| Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-coreCVE-2018-1199 · GHSA-V596-FWHQ-8X48 |
org.springframework.security:spring-security-coreorg.springframework:spring-core |
MavenRed Hat |
Medium
|
Fix reported |
|
| Deserialization of untrusted data in FasterXML jackson-databindCVE-2019-14379 · GHSA-6FPP-RGJ9-8RWC |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
Critical
|
Fix reported |
|
| Information exposure in FasterXML jackson-databindCVE-2019-12086 · GHSA-5WW9-J83M-Q7QX |
com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
| Apache Commons Compress vulnerable to denial of service due to infinite loopCVE-2018-1324 · GHSA-H436-432X-8FVX |
com.liferay:com.liferay.portal.tools.bundle.supportio.takari:commons-compress |
MavenRed Hat |
Medium
|
Fix reported |
|
| Use of Externally-Controlled Input to Select Classes or Code in InfinispanCVE-2019-10174 · GHSA-H47X-2J37-FW5M |
org.infinispan:infinispan-coreRed Hat JBoss Data Virtualization 6/infinispan-core |
MavenRed Hat |
High
|
Fix reported |
|
| OpenDaylight NULL Pointer DereferenceCVE-2017-1000360 · GHSA-GJQ3-997P-HG6F |
org.opendaylight.controller:releasepomRed Hat OpenStack Platform 10 (Newton)/opendaylight |
MavenRed Hat |
Medium
|
No fix reported |
|
| XML External Entity Reference in Apache KarafCVE-2018-11788 · GHSA-92WJ-X78C-M4FX |
org.apache.karaf.specs:org.apache.karaf.specs.java.xmlRed Hat Fuse 7/karaf |
MavenRed Hat |
Critical
|
Fix reported |
|
| Spring Security uses insufficiently random valuesCVE-2019-3795 · GHSA-V2R2-7QM7-JJ6V |
org.springframework.security:spring-security-coreRed Hat Fuse 7/spring-security-core |
MavenRed Hat |
Medium
|
Fix reported |
|
| Insufficiently Protected Credentials and Improper Authentication in Spring SecurityCVE-2019-11272 · GHSA-V33X-PRHC-GPH5 |
org.springframework.security:spring-security-casorg.springframework.security:spring-security-core |
MavenRed Hat |
High
|
Fix reported |
|
