Security
فارسی
All products

Red Hat Fuse 7/camel

Red Hat · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache serialization mechanism does not have a list of classes allowed for serialization/deserializationCVE-2018-1295 · GHSA-CHP4-RV79-68J3 org.apache.ignite:ignite-coreRed Hat Fuse 7/camel MavenRed Hat Critical Fix reported
FasterXML jackson-databind allows unauthenticated remote code execution CVE-2018-7489 · GHSA-CGGJ-FVV3-CQWV com.fasterxml.jackson.core:jackson-databindRed Hat BPM Suite 6/jackson-databind MavenRed Hat Critical Fix reported
Apache XML-RPC vulnerable to Deserialization of Untrusted DataCVE-2016-5003 · GHSA-4GQP-296R-J5MQ org.apache.xmlrpc:xmlrpcRed Hat Enterprise Linux 5/xmlrpc MavenRed Hat Critical No fix reported
ws-xmlrpc DoS VulnerabilityCVE-2016-5004 · GHSA-R2PG-W96P-PCPJ org.apache.xmlrpc:xmlrpc-commonRed Hat Enterprise Linux 5/xmlrpc MavenRed Hat Medium No fix reported
Apache XML-RPC XXE VulnerabilityCVE-2016-5002 · GHSA-WP35-6JQV-R33M org.apache.xmlrpc:xmlrpcRed Hat Enterprise Linux 5/xmlrpc MavenRed Hat High No fix reported
Moderate severity vulnerability that affects com.sparkjava:spark-coreCVE-2018-9159 · GHSA-76QR-MMH8-CP8F com.sparkjava:spark-coreRed Hat Fuse 7/camel MavenRed Hat Medium Fix reported
netty-tcnative-boringssl-static: memory-cache side-channel attack on DSA signaturesCVE-2018-12440 Red Hat Fuse 7/camel Red Hat Medium No fix reported
git: arbitrary code execution via .gitmodulesCVE-2018-17456 Red Hat Fuse 7/camelRed Hat JBoss Fuse 6/camel Red Hat High No fix reported