Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat JBoss Fuse 6/karaf
Red Hat
· Package
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Pivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitized
CVE-2016-9878 · GHSA-2M8H-FGR8-2Q9W
org.springframework:spring-webmvc
Red Hat JBoss A-MQ 6/karaf
Maven
Red Hat
High
Fix reported
2024-03-05
XML External Entity Reference in Apache Karaf
CVE-2018-11788 · GHSA-92WJ-X78C-M4FX
org.apache.karaf.specs:org.apache.karaf.specs.java.xml
Red Hat Fuse 7/karaf
Maven
Red Hat
Critical
Fix reported
2024-02-16
Insecure Java Deserialization in Apache Karaf
CVE-2021-41766 · GHSA-JH5G-9M4V-9VV9
org.apache.karaf.management:org.apache.karaf.management.server
Red Hat BPM Suite 6/karaf
Maven
Red Hat
High
Fix reported
2024-02-16
Path traversal in Apache Karaf
CVE-2022-22932 · GHSA-544X-2JX9-4PFG
org.apache.karaf:apache-karaf
Red Hat BPM Suite 6/karaf
Maven
Red Hat
Medium
Fix reported
2023-11-08
Moderate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karaf
CVE-2019-0191 · GHSA-869J-5855-HJPM
org.apache.karaf:apache-karaf
org.apache.karaf:karaf
Maven
Red Hat
Medium
Fix reported
2023-11-08
Improper Authentication in Apache Karaf
CVE-2018-11787 · GHSA-CQ9C-55R7-455X
org.apache.karaf:apache-karaf
Red Hat JBoss A-MQ 6/karaf
Maven
Red Hat
High
Fix reported
2023-11-08
Improper Privilege Management in Apache Karaf
CVE-2018-11786 · GHSA-9448-C9WQ-JG9V
org.apache.karaf:apache-karaf
Red Hat JBoss A-MQ 6/karaf
Maven
Red Hat
High
Fix reported
2023-11-08
Moderate severity vulnerability that affects io.undertow:undertow-core
CVE-2017-2670 · GHSA-3X7H-5HFR-HVJM
io.undertow:undertow-core
Red Hat Fuse 7/karaf
Maven
Red Hat
Medium
Fix reported
2023-11-08
Karaf JMX Console RCE during deserialization
CVE-2016-8648
Red Hat JBoss A-MQ 6/Karaf
Red Hat JBoss Fuse 6/karaf
Red Hat
Medium
No fix reported
Not recorded