redhat jboss enterprise application platform - vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an malicious user to access remote HTTP services available from the server.

Redhat Jboss Enterprise Application Platform -Redhat Jboss Enterprise Application Platform Expansion Pack -Redhat Jboss Enterprise Application Platform 7.4

7.5

CVSSv3

A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTable with no checks on resources consumed. This issue could allow an malicious user to submit malicious requests using these classes, which could eventually exhaus...

Redhat Jboss Enterprise Application Platform 7.4 Redhat Jboss Enterprise Application Platform -

6.5

CVSSv3

A flaw was found in Infinispan's REST. Bulk read endpoints do not properly evaluate user permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.

Redhat Jboss Data Grid -Redhat Jboss Enterprise Application Platform 6 Redhat Data Grid Infinispan Infinispan -

6.5

CVSSv3

A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin permissions for the operation. This issue could allow an authenticated user to access information outside of their intended permissions.

Redhat Data Grid Redhat Jboss Data Grid -Redhat Jboss Enterprise Application Platform 6 Infinispan Infinispan -

7.5

CVSSv3

A flaw was found in Undertow. When an AJP request is sent that exceeds the max-header-size attribute in ajp-listener, JBoss EAP is marked in an error state by mod_cluster in httpd, causing JBoss EAP to close the TCP connection without returning an AJP response. This happens becau...

Redhat Jboss Enterprise Application Platform 7.0.0 Redhat Undertow -Redhat Single Sign-on 7.0 Redhat Jboss Enterprise Application Platform -

6.5

CVSSv3

A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitive information from th...

Redhat Jboss Enterprise Application Platform -Redhat Wildfly Core Redhat Jboss Enterprise Application Platform 7.4

7.5

CVSSv3

A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it&#...

Redhat Undertow Redhat Openshift Container Platform 4.11 Redhat Openshift Container Platform 4.12 Redhat Openshift Container Platform For Ibm Linuxone 4.9 Redhat Openshift Container Platform For Ibm Linuxone 4.10 Redhat Openshift Container Platform For Power 4.9 Redhat Openshift Container Platform For Power 4.10 Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform Text-only Advisories -Redhat Single Sign-on 7.6 Redhat Jboss Enterprise Application Platform 7.4

7.5

CVSSv3

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook