Security
فارسی
All products

Red Hat JBoss Fuse 6/camel

Red Hat · Package
21 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Smack allows the bypass of TLS protectionsCVE-2016-10027 · GHSA-66PQ-HQV5-228G org.igniterealtime.smack:smack-coreRed Hat JBoss BRMS 5/smack MavenRed Hat Medium Fix reported
Camel-xstream component in Apache Camel can allow remote attackers to execute arbitrary commands CVE-2015-5344 · GHSA-GV5F-CJW9-5VXG org.apache.camel:camel-xstreamOpenShift Enterprise 1/camel MavenRed Hat Critical Fix reported
Pyspark User Impersonation VulnerabilityCVE-2018-11760 · GHSA-FVXV-9XXR-H7WJVersion ranges need review. pysparkRed Hat JBoss Fuse 6/camel PyPIRed Hat Medium Fix reported
Security Constraint Bypass in Spring SecurityCVE-2016-9879 · GHSA-V35C-49J6-Q8HQ org.springframework.security:spring-security-coreRed Hat JBoss Fuse 6/camel MavenRed Hat High Fix reported
Deserialization of Untrusted Data in GroovyCVE-2016-6814 · GHSA-XPHJ-M9CC-8FMQ org.codehaus.groovy:groovy-allorg.codehaus.groovy:groovy MavenRed Hat Critical Fix reported
Apache serialization mechanism does not have a list of classes allowed for serialization/deserializationCVE-2018-1295 · GHSA-CHP4-RV79-68J3 org.apache.ignite:ignite-coreRed Hat Fuse 7/camel MavenRed Hat Critical Fix reported
Improper Input Validation in JGroupsCVE-2016-2141 · GHSA-RC7H-X6CQ-988Q org.jgroups:jgroupsRed Hat BPM Suite 6/Clustering MavenRed Hat Critical Fix reported
Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacksCVE-2016-8749 · GHSA-VVJC-Q5VR-52Q6 org.apache.camel:camel-jacksonRed Hat JBoss Fuse 6/camel MavenRed Hat Critical Fix reported
Apache XML-RPC vulnerable to Deserialization of Untrusted DataCVE-2016-5003 · GHSA-4GQP-296R-J5MQ org.apache.xmlrpc:xmlrpcRed Hat Enterprise Linux 5/xmlrpc MavenRed Hat Critical No fix reported
Privilege Escalation in Hibernate ValidatorCVE-2017-7536 · GHSA-XXGP-PCFC-3VGC org.hibernate:hibernate-validatorRed Hat Enterprise Virtualization 3/hibernate-validator MavenRed Hat High Fix reported
ws-xmlrpc DoS VulnerabilityCVE-2016-5004 · GHSA-R2PG-W96P-PCPJ org.apache.xmlrpc:xmlrpc-commonRed Hat Enterprise Linux 5/xmlrpc MavenRed Hat Medium No fix reported
Loop with Unreachable Exit Condition in NettyCVE-2016-4970 · GHSA-RV63-GQM8-9W8Q io.netty:netty-handlerRed Hat JBoss Enterprise Application Platform 7/netty MavenRed Hat High Fix reported
Apache Camel's Mail is vulnerable to path traversalCVE-2018-8041 · GHSA-JV74-F9PJ-XP3F org.apache.camel:camel-mailRed Hat JBoss Data Virtualization 6/switchyard MavenRed Hat Medium Fix reported
Apache XML-RPC XXE VulnerabilityCVE-2016-5002 · GHSA-WP35-6JQV-R33M org.apache.xmlrpc:xmlrpcRed Hat Enterprise Linux 5/xmlrpc MavenRed Hat High No fix reported
Deserialization of Untrusted Data in InfinispanCVE-2018-1131 · GHSA-QQFC-M9HC-PQV3 org.infinispan:infinispan-coreRed Hat JBoss Data Virtualization 6/infinispan MavenRed Hat High Fix reported
Improper Restriction of XML External Entity Reference in Apache FOPCVE-2017-5661 · GHSA-5HG8-R9VQ-GJQP org.apache.xmlgraphics:fopRed Hat Enterprise Linux 6/fop MavenRed Hat High Fix reported
Restlet Framework allows remote attackers to access arbitrary files via a crafted REST API HTTP requestCVE-2017-14949 · GHSA-CVJ4-G3GX-8VQQ org.restlet.jse:org.restletRed Hat JBoss Fuse 6/camel MavenRed Hat High Fix reported
Incorrect Authorization in UndertowCVE-2017-12196 · GHSA-CP7V-VMV7-6X2Q io.undertow:undertow-coreRed Hat JBoss Fuse 6/camel MavenRed Hat Medium Fix reported
Spark allows remote attackers to read arbitrary files via a .. (dot dot) in the URICVE-2016-9177 · GHSA-89GC-6CW6-4VCH com.sparkjava:spark-coreRed Hat JBoss Fuse 6/camel MavenRed Hat High Fix reported
git: Mishandling layers of tree objectsCVE-2017-15298 Red Hat BPM Suite 6/jgitRed Hat Enterprise Linux 6/git Red Hat Low No fix reported