Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat integration service registry - vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0Nghttp2 Nghttp2Netty NettyEnvoyproxy Envoy 1.27.0Envoyproxy Envoy 1.26.4Envoyproxy Envoy 1.25.9Envoyproxy Envoy 1.24.10Eclipse JettyCaddyserver CaddyGolang Http2Golang GoGolang NetworkingF5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager
8.1
CVSSv3
CVE-2023-4853
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an malicious user to bypass the security policy altogether, resul...
Quarkus QuarkusRedhat Decision Manager 7.0Redhat Jboss Middleware Text-only Advisories 1.0Redhat Jboss Middleware 1Redhat Integration Service Registry -Redhat Integration Camel Quarkus -Redhat Build Of QuarkusRedhat Openshift Serverless -Redhat Integration Camel KRedhat Process Automation Manager 7.0Redhat Build Of Optaplanner 8.0Redhat Openshift Serverless 1.0Redhat Openshift Container Platform 4.10Redhat Openshift Container Platform 4.11Redhat Openshift Container Platform 4.12
7.5
CVSSv3
CVE-2023-1108
A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.
Redhat Decision Manager 7.0Redhat Single Sign-on -Redhat Process Automation 7.0Redhat Openstack Platform 13.0Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Build Of Quarkus -Redhat Integration Service Registry -Redhat Integration Camel K -Redhat Jboss Enterprise Application Platform Expansion Pack -Redhat Fuse 1.0.0Redhat UndertowRedhat Openshift Container Platform 4.11Redhat Openshift Container Platform 4.12Redhat Openshift Container Platform For Linuxone 4.9Redhat Openshift Container Platform For Linuxone 4.10Redhat Openshift Container Platform For Power 4.9Redhat Openshift Container Platform For Power 4.10Redhat Jboss Enterprise Application Platform 7.4Redhat Single Sign-on 7.6Netapp Oncommand Workflow Automation -
3.7
CVSSv3
CVE-2022-41862
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
Postgresql PostgresqlFedoraproject Fedora 8Redhat Enterprise Linux 8.0Redhat Integration Service Registry -Redhat Integration Camel K -Redhat Integration Camel Quarkus -
7.5
CVSSv3
CVE-2022-4492
The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.
Redhat Jboss Enterprise Application Platform 7.0.0Redhat Single Sign-on 7.0Redhat Jboss Fuse 7.0.0Redhat Build Of Quarkus -Redhat Integration Service Registry -Redhat Integration Camel K -Redhat Undertow 2.7.0Redhat Integration Camel For Spring Boot -Redhat Migration Toolkit For Applications 6.0Redhat Migration Toolkit For Runtimes -
7.5
CVSSv3
CVE-2022-1278
A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.
Redhat WildflyRedhat Single Sign-on 7.0Redhat Amq 2.0Redhat Integration Service Registry -Redhat Integration Camel K -Redhat Jboss A-mq 7Redhat Jboss Enterprise Application Platform Expansion Pack -Redhat Amq Online -
4.8
CVSSv3
CVE-2021-3536
A flaw was found in Wildfly in versions prior to 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality and Integrity.
Redhat Build Of Quarkus -Redhat Data Grid 8.0Redhat Descision Manager 7.0Redhat Integration Camel K -Redhat Integration Camel Quarkus -Redhat Integration Service Registry -Redhat Jboss A-mq 7Redhat Jboss Enterprise Application Platform 7.0Redhat Wildfly
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook