Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat jboss enterprise application platform 6.4.21 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2020-1710
The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.
Redhat Jboss Data Grid -Redhat Jboss Data Grid 7.0.0Redhat Jboss Enterprise Application Platform -Redhat Jboss Enterprise Application Platform 6.4.21Redhat Jboss Enterprise Application Platform 7.0.0Redhat Jboss Enterprise Application Platform 7.2.0Redhat Jboss Enterprise Application Platform 7.3.0Redhat Openshift Application Runtimes -Redhat Single Sign-on -
4
CVSSv2
CVE-2017-2582
It was found that while parsing the SAML messages the StaxParserUtil class of keycloak prior to 2.5.1 replaces special strings for obtaining attribute values with system property. This could allow an malicious user to determine values of system properties at the attacked system b...
Redhat KeycloakRedhat Jboss Enterprise Application Platform 6.0.0Redhat Jboss Enterprise Application Platform 7.0.0Redhat Jboss Enterprise Application Platform 7.1.0Redhat Jboss Enterprise Application Platform 6.4.0
4.4
CVSSv2
CVE-2017-7536
In Hibernate Validator 5.2.x prior to 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occ...
Redhat Hibernate ValidatorRedhat Satellite 6.4Redhat Satellite Capsule 6.4Redhat Jboss Enterprise Application Platform 6.0.0Redhat Jboss Enterprise Application Platform 6.4.0Redhat Jboss Enterprise Application Platform 7.0Redhat Jboss Enterprise Application Platform 7.1Redhat Virtualization 4.0Redhat Virtualization Host 4.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook