JF
Product
Jboss Fuse
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 16Medium 10Low 3
Watch
Add Jboss Fuse to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1714 | 8.8 | May 13 | A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks Affected: 7.0.0 |
| CVE-2020-1718 | 8.8 | May 12 | A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0 Affected: 7.0.0 |
| CVE-2014-0120 | 8.8 | Dec 29 | Cross-site request forgery (CSRF) vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run… Affected: 6.1.0 |
| CVE-2020-1757 | 8.1 | Apr 21 | A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet… Affected: 6.0.0; 7.0.0 |
| CVE-2024-7885 | 7.5 | Aug 21 | Undertow: improper state management in proxy protocol parsing causes information leakage Affected: 7.0.0 |
| CVE-2022-4492 | 7.5 | Feb 23 | The undertow client is not checking the server identity presented by the server certificate in https connections Affected: 7.0.0 |
| CVE-2022-2053 | 7.5 | Aug 5 | When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpServerRequestConduit implementation closes a connection… Affected: 7.0.0 |
| CVE-2021-4104 | 7.5 | Dec 14 | JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration Affected: 6.0.0; 7.0.0 |
| CVE-2020-27782 | 7.5 | Feb 23 | A flaw was found in the Undertow AJP connector Affected: 6.0.0; 7.0.0 |
| CVE-2020-25644 | 7.5 | Oct 6 | A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session Affected: 7.0.0 |
| CVE-2020-10714 | 7.5 | Sep 23 | A flaw was found in WildFly Elytron version 1.11.3.Final and before Affected: 7.0.0 |
| CVE-2020-10718 | 7.5 | Sep 16 | A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed setting of the Thread Context Classloader (TCCL) Affected: 7.0.0 |
| CVE-2019-14888 | 7.5 | Jan 23 | A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS Affected: 6.0.0; 7.0.0 |
| CVE-2019-10172 | 7.5 | Nov 18 | A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries Affected: 7.0.0 |
| CVE-2021-20218 | 7.4 | Mar 16 | A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after Affected: 7.0.0 |
| CVE-2016-8648 | 7.2 | Aug 1 | It was found that the Karaf container used by Red Hat JBoss Fuse 6.x, and Red Hat JBoss A-MQ 6.x, deserializes objects passed to MBeans via JMX operations Affected: 6.0.0 |
Showing 16