JM
Product
Jboss Middleware Text-only Advisories
On CISA KEVExploited in the wild
9
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 3Low 0
Watch
Add Jboss Middleware Text-only Advisories to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-1415 | 8.8 | Sep 11 | Drools: unsafe data deserialization in streamutils Affected: All versions, or not specified |
| CVE-2024-1132 | 8.1 | Apr 17 | Keycloak: path transversal in redirection validation Affected: 1.0 |
| CVE-2023-4853 | 8.1 | Sep 20 | Quarkus: http security policy bypass Affected: 1.0 |
| CVE-2019-14439 | 7.5 | Jul 30 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2 Affected: 1.0 |
| CVE-2016-4970 | 7.5 | Apr 13 | handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop) Affected: 1.0 |
Showing 5