Login Request a demo
RE
Product
Resteasy
by Redhat · last CVE Feb 17, 2023
18
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 0High 5Medium 9Low 0
Severity
All severities18Critical0High5Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Resteasy to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-6345
6.5
2%
Sep 7
RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs
Affected: All versions, or not specified
CVE-2021-20293
6.1
1%
Jun 10
A reflected Cross-Site Scripting (XSS) flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding when calling…
Affected: through 4.6.0
CVE-2020-10688
6.1
1%
May 27
A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly handle URL encoding when the…
Affected: before 3.11.1; 4.5.0 before 4.5.3
CVE-2016-6347
6.1
2%
Apr 20
Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
Affected: All versions, or not specified
CVE-2016-6348
6.1
2%
Apr 12
JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack
Affected: All versions, or not specified
CVE-2023-0482
5.5
0%
Feb 17
In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that…
Affected: 3.15.4; 4.7.7; 5.0.5; 6.2.2
CVE-2021-20289
5.3
1%
Mar 26
A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final
Affected: through 4.6.0
CVE-2020-25633
5.3
1%
Sep 18
A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final
Affected: before 3.14.0; 4.5.0 through 4.5.6
CVE-2020-25724
4.3
1%
May 26
A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided
Affected: before 2.0.0; 2.0.0; 2.0.0
Showing 9