All products

Red Hat JBoss Fuse 6/karaf

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Pivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitizedCVE-2016-9878 · GHSA-2M8H-FGR8-2Q9W org.springframework:spring-webmvcRed Hat JBoss A-MQ 6/karaf MavenRed Hat High Fix reported
XML External Entity Reference in Apache KarafCVE-2018-11788 · GHSA-92WJ-X78C-M4FX org.apache.karaf.specs:org.apache.karaf.specs.java.xmlRed Hat Fuse 7/karaf MavenRed Hat Critical Fix reported
Insecure Java Deserialization in Apache KarafCVE-2021-41766 · GHSA-JH5G-9M4V-9VV9 org.apache.karaf.management:org.apache.karaf.management.serverRed Hat BPM Suite 6/karaf MavenRed Hat High Fix reported
Path traversal in Apache KarafCVE-2022-22932 · GHSA-544X-2JX9-4PFG org.apache.karaf:apache-karafRed Hat BPM Suite 6/karaf MavenRed Hat Medium Fix reported
Moderate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karafCVE-2019-0191 · GHSA-869J-5855-HJPM org.apache.karaf:apache-karaforg.apache.karaf:karaf MavenRed Hat Medium Fix reported
Improper Authentication in Apache KarafCVE-2018-11787 · GHSA-CQ9C-55R7-455X org.apache.karaf:apache-karafRed Hat JBoss A-MQ 6/karaf MavenRed Hat High Fix reported
Improper Privilege Management in Apache KarafCVE-2018-11786 · GHSA-9448-C9WQ-JG9V org.apache.karaf:apache-karafRed Hat JBoss A-MQ 6/karaf MavenRed Hat High Fix reported
Moderate severity vulnerability that affects io.undertow:undertow-coreCVE-2017-2670 · GHSA-3X7H-5HFR-HVJM io.undertow:undertow-coreRed Hat Fuse 7/karaf MavenRed Hat Medium Fix reported
Karaf JMX Console RCE during deserializationCVE-2016-8648 Red Hat JBoss A-MQ 6/KarafRed Hat JBoss Fuse 6/karaf Red Hat Medium No fix reported