Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat codeready studio 12.0 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2021-4104
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests t...
Apache Log4j 1.2Fedoraproject Fedora 35Redhat Jboss Operations Network 3.0Redhat Jboss A-mq 6.0.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Jboss Enterprise Application Platform 6.0.0Redhat Jboss Enterprise Application Platform 7.0Redhat Jboss Fuse 6.0.0Redhat Jboss Fuse Service Works 6.0Redhat Jboss Web Server 3.0Redhat Jboss Data Virtualization 6.0.0Redhat Enterprise Linux 8.0Redhat Single Sign-on 7.0Redhat Software Collections -Redhat Jboss Fuse 7.0.0Redhat Process Automation 7.0Redhat Jboss Data Grid 7.0.0Redhat Openshift Application Runtimes -Redhat Codeready Studio 12.0Redhat Integration Camel K -Redhat Openshift Container Platform 4.6
5.3
CVSSv3
CVE-2021-3642
A flaw was found in Wildfly Elytron in versions before 1.10.14.Final, before 1.15.5.Final and before 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest threat of this vulnerability is confidentiality.
Redhat Wildfly ElytronRedhat Build Of Quarkus -Redhat Codeready Studio 12.0Redhat Data Grid 8.0Redhat Descision Manager 7.0Redhat Integration Camel K -Redhat Integration Camel QuarkusRedhat Jboss Enterprise Application Platform 7.0.0Redhat Jboss Enterprise Application Platform Expansion Pack -Redhat Jboss Fuse 7.0.0Redhat Openshift Application Runtimes -Redhat Process Automation 7.0Quarkus Quarkus
7.4
CVSSv3
CVE-2021-20218
A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability ...
Redhat Kubernetes-clientRedhat A-mq Online -Redhat Build Of Quarkus -Redhat Codeready Studio 12.0Redhat Descision Manager 7.0Redhat Integration Camel K -Redhat Jboss Fuse 7.0.0Redhat Openshift Container Platform 3.11Redhat Process Automation 7.0
7.5
CVSSv3
CVE-2020-10714
A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a session fixation attack. The highest threat from this vulnerability is to data confidentiality and integri...
Redhat Wildfly ElytronRedhat Jboss Fuse 7.0.0Redhat Process Automation 7.0Redhat Descision Manager 7.0Redhat Codeready Studio 12.0Netapp Oncommand Insight -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook