jboss_enterprise_application_platform vulnerabilities and exploits

(subscribe to this query)

An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an malicious user to access remote HTTP services available from the server.

Redhat Jboss Enterprise Application Platform -Redhat Jboss Enterprise Application Platform Expansion Pack -Redhat Jboss Enterprise Application Platform 7.4

A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTable with no checks on resources consumed. This issue could allow an malicious user to submit malicious requests using these classes, which could eventually exhaus...

Redhat Jboss Enterprise Application Platform 7.4 Redhat Jboss Enterprise Application Platform -

A flaw was found in wildfly-core. A management user could use the resolve-expression in the HAL Interface to read possible sensitive information from the Wildfly system. This issue could allow a malicious user to access the system and obtain possible sensitive information from th...

Redhat Jboss Enterprise Application Platform -Redhat Wildfly Core Redhat Jboss Enterprise Application Platform 7.4

A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it&#...

Redhat Undertow Redhat Openshift Container Platform 4.11 Redhat Openshift Container Platform 4.12 Redhat Openshift Container Platform For Ibm Linuxone 4.9 Redhat Openshift Container Platform For Ibm Linuxone 4.10 Redhat Openshift Container Platform For Power 4.9 Redhat Openshift Container Platform For Power 4.10 Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform Text-only Advisories -Redhat Single Sign-on 7.6 Redhat Jboss Enterprise Application Platform 7.4

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an malicious user to cause a denial of service. The highest threat from this vulnerability is availability.

Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Integration Camel K -Redhat Integration Camel Quarkus -Redhat Fuse 1.0 Redhat Undertow Redhat Jboss Enterprise Application Platform 7.3 Redhat Jboss Enterprise Application Platform 7.4

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions before...

Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform -Redhat Wildfly Core Redhat Integration -Redhat Undertow Redhat Jboss Enterprise Application Platform 7.4 Redhat Jboss Enterprise Application Platform 7.3 Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -

A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions before 2.0.35.SP1, before 2.2.6.SP1, bef...

Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Fuse 1.0 Redhat Undertow 2.0.39 Redhat Undertow 2.2.9 Redhat Undertow 2.0.36 Redhat Undertow 2.2.7 Redhat Undertow 2.2.6 Redhat Undertow Redhat Undertow 2.0.35 Redhat Jboss Enterprise Application Platform 7.3 Redhat Jboss Enterprise Application Platform 7.4 Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -

A flaw was found in Wildfly. An incorrect JBOSS_LOCAL_USER challenge location when using the elytron configuration may lead to JBOSS_LOCAL_USER access to all users on the machine. The highest threat from this vulnerability is to confidentiality, integrity, and availability. This ...

Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform -Redhat Wildfly Core Redhat Jboss Enterprise Application Platform 7.4 Redhat Jboss Enterprise Application Platform 7.3

A cross-site scripting (XSS) flaw was found in RESTEasy in versions prior to 3.11.1.Final and prior to 4.5.3.Final, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS attack.

Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Resteasy Redhat Fuse 1.0 Redhat Jboss Enterprise Application Platform 7.3 Redhat Jboss Enterprise Application Platform 7.4

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook