Latest redhat jboss enterprise web server Vulnerabilities

● CVE-2020-25710

A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest thr...

Openldap Openldap<2.4.56

Microsoft .NET 7.0

Redhat Jboss Enterprise Application Platform=5.0.0

Redhat Jboss Enterprise Web Server=2.0.0

Redhat Enterprise Linux=5.0

Redhat Enterprise Linux=6.0

and 5 more

● CVE-2012-5626

EJB method in Red Hat JBoss BRMS 5; Red Hat JBoss Enterprise Application Platform 5; Red Hat JBoss Operations Network 3.1; Red Hat JBoss Portal 4 and 5; Red Hat JBoss SOA Platform 4.2, 4.3, and 5; in ...

Redhat Jboss Brms=5

Redhat Jboss Enterprise Application Platform=5.0.0

Redhat Jboss Enterprise Web Server=1.0.0

Redhat Jboss Operations Network=3.1

Redhat Jboss Portal=4.0.0

Redhat Jboss Portal=5.0.0

and 3 more

● CVE-2019-19906

cyrus-sasl (aka Cyrus SASL) 2.1.27 has an out-of-bounds write leading to unauthenticated remote denial-of-service in OpenLDAP via a malformed LDAP packet. The OpenLDAP crash is ultimately caused by an...

Apple macOS Catalina<10.15.6

Apple Mojave

Apple High Sierra

debian/cyrus-sasl2

debian/cyrus-sasl2<=2.1.27~101-g0780600+dfsg-3<=2.1.27+dfsg-1

Apple macOS Catalina<2.1.28

and 56 more

● CVE-2014-3701

eDeploy has tmp file race condition flaws

debian

Redhat Edeploy

Redhat Jboss Enterprise Web Server=1.0.0

● CVE-2014-3699

eDeploy has RCE via cPickle deserialization of untrusted data

Redhat Edeploy

Redhat Jboss Enterprise Web Server=1.0.0

debian

● CVE-2012-2148

An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies

Redhat Jboss Community Application Server=7.1.1

Linux Linux kernel

Redhat Jboss Enterprise Web Server=1.0.0

debian/jbossas4

● CVE-2014-3700

eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data

Redhat Edeploy<=1.6.0

Redhat Jboss Enterprise Web Server=1.0.0

debian

● CVE-2014-3655

JBoss KeyCloak is vulnerable to soft token deletion via CSRF

Redhat Keycloak<=1.0.1

Redhat Jboss Enterprise Web Server=1.0.0

● CVE-2011-3923

Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.

Apache Struts>=2.0.0<2.3.1.2

Redhat Jboss Enterprise Web Server=1.0.0

maven/org.apache.struts:struts2-core>=2.0.0<2.3.1.2

debian/libstruts1.2-java

● CVE-2019-1559

OpenSSL could allow a remote attacker to obtain sensitive information, caused by the failure to immediately close the TCP connection after the hosts encounter a zero-length record with valid padding. ...

redhat/openssl<0:1.0.1e-58.el6_10

redhat/openssl<1:1.0.2k-19.el7

redhat/jws5-ecj<0:4.12.0-1.redhat_1.1.el6

redhat/jws5-javapackages-tools<0:3.4.1-5.15.11.el6

redhat/jws5-jboss-logging<0:3.3.2-1.Final_redhat_00001.1.el6

redhat/jws5-tomcat<0:9.0.21-10.redhat_4.1.el6

and 226 more

● CVE-2018-1336

An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to...

Apache Tomcat>=7.0.28<=7.0.86

Apache Tomcat>=8.0.0<=8.0.51

Apache Tomcat>=8.5.0<=8.5.30

Apache Tomcat>=9.0.1<=9.0.7

Apache Tomcat=8.0.0-rc1

Apache Tomcat=8.0.0-rc10

and 81 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.