Latest netapp active iq unified manager linux Vulnerabilities

● CVE-2020-23064

Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the <options> element.

Jquery Jquery>=2.2.0<3.5.0

maven/org.webjars.npm:jquery>=1.0.3<3.5.0

npm/jquery>=1.0.3<3.5.0

rubygems/jquery-rails<4.4.0

nuget/jQuery>=1.0.3<3.5.0

Netapp Active Iq Unified Manager Linux

and 4 more

● CVE-2023-20862

In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, and versions 6.0.x prior to 6.0.3, the logout support does not properly clean the security context if using serialized...

maven/org.springframework.security:spring-security-core>=6.0.0<6.0.3

maven/org.springframework.security:spring-security-core>=5.8.0<5.8.3

maven/org.springframework.security:spring-security-core>=5.7.0<5.7.8

redhat/spring-security<5.7.8

redhat/spring-security<5.8.3

redhat/spring-security<6.0.3

and 6 more

● CVE-2023-26049

Eclipse Jetty could allow a remote authenticated attacker to obtain sensitive information, caused by a flaw during nonstandard cookie parsing. By sending a specially crafted request to tamper with the...

maven/org.eclipse.jetty:jetty-server<9.4.51.v20230217

maven/org.eclipse.jetty:jetty-server>=12.0.0alpha0<12.0.0.beta0

maven/org.eclipse.jetty:jetty-server>=11.0.0<11.0.14

maven/org.eclipse.jetty:jetty-server>=10.0.0<10.0.14

Eclipse Jetty<9.4.51

Eclipse Jetty>=10.0.0<10.0.14

and 18 more

● CVE-2023-21971

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privi...

Oracle Communications Cloud Native Core Binding Support Function=22.4.0

Oracle Communications Cloud Native Core Binding Support Function=23.1.0

Oracle Communications Cloud Native Core Policy=22.4.0

Oracle Communications Cloud Native Core Policy=23.1.0

Oracle Mysql Connectors>=8.0.0<=8.0.32

Netapp Active Iq Unified Manager Linux

and 4 more

● CVE-2022-23240

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows unauthorized users to update EMS Subscriptions via u...

Netapp Active Iq Unified Manager Linux<9.11p1

Netapp Active Iq Unified Manager Vmware Vsphere<9.11p1

Netapp Active Iq Unified Manager Windows<9.11p1

● CVE-2022-23239

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.11P1 are susceptible to a vulnerability which allows administrative users to perform a Stored Cross-Site ...

Netapp Active Iq Unified Manager Linux<9.11p1

Netapp Active Iq Unified Manager Vmware Vsphere<9.11p1

Netapp Active Iq Unified Manager Windows<9.11p1

● CVE-2022-23235

Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows versions prior to 9.10P1 are susceptible to a vulnerability which could allow an attacker to discover cluster, node and Activ...

Netapp Active Iq Unified Manager Linux<9.10

Netapp Active Iq Unified Manager Vmware Vsphere<9.10

Netapp Active Iq Unified Manager Windows<9.10

Netapp Active Iq Unified Manager Linux=9.10

Netapp Active Iq Unified Manager Vmware Vsphere=9.10

Netapp Active Iq Unified Manager Windows=9.10

● CVE-2022-2764

A flaw was found in Undertow with EJB invocations. This flaw allows an attacker to generate a valid HTTP request and send it to the server on an established connection after removing the LAST_CHUNK fr...

redhat/eap7-undertow<0:2.2.20-1.SP1_redhat_00001.1.el8ea

redhat/eap7-undertow<0:2.2.20-1.SP1_redhat_00001.1.el9ea

redhat/eap7-undertow<0:2.2.20-1.SP1_redhat_00001.1.el7ea

redhat/rh-sso7-keycloak<0:18.0.6-1.redhat_00001.1.el7

redhat/rh-sso7-keycloak<0:18.0.6-1.redhat_00001.1.el8

redhat/rh-sso7-keycloak<0:18.0.6-1.redhat_00001.1.el9

and 13 more

● CVE-2022-22976

A flaw was found in Spring Framework. The encoder does not perform any salt rounds when using the BCrypt class with the maximum work factor (31) due to an integer overflow error.

redhat/jenkins<0:2.401.1.1686831596-3.el8

redhat/spring-security<5.5.7

redhat/spring-security<5.6.4

redhat/spring-security<5.7.0

Vmware Spring Security<5.5.7

Vmware Spring Security>=5.6.0<5.6.4

and 5 more

● CVE-2022-22978

A flaw was found in Spring Security. When using RegexRequestMatcher, an easy misconfiguration can bypass some servlet containers. Applications using RegexRequestMatcher with `.` in the regular express...

redhat/jenkins<0:2.387.3.1684911776-3.el8

redhat/spring-security<5.5.7

redhat/spring-security<5.6.4

redhat/spring-security<5.7.0

Vmware Spring Security<5.5.7

Vmware Spring Security>=5.6.0<5.6.4

and 5 more

● CVE-2022-22970

A flaw was found in Spring Framework. Applications that handle file uploads are vulnerable to a denial of service (DoS) attack if they rely on data binding to set a MultipartFile or javax.servlet.Part...

redhat/springframework<5.3.20

redhat/springframework<5.2.22

maven/org.springframework:spring-beans>=5.3.0<5.3.20

maven/org.springframework:spring-beans<=5.2.21.RELEASE

VMware Spring Framework<=5.2.21

VMware Spring Framework>=5.3.0<=5.3.19

and 8 more

● CVE-2022-24823

CVE-2021-21290 contains an incomplete fix, and this addresses the issue found in netty. When using multipart decoders in netty, local information disclosure can occur via the local system temporary di...

redhat/eap7-netty<0:4.1.77-1.Final_redhat_00001.1.el8ea

redhat/eap7<0:1-18.el9ea

redhat/eap7-activemq-artemis<0:2.16.0-9.redhat_00042.1.el9ea

redhat/eap7-activemq-artemis-native<1:1.0.2-1.redhat_00001.1.el9ea

redhat/eap7-aesh-extensions<0:1.8.0-1.redhat_00001.1.el9ea

redhat/eap7-aesh-readline<0:2.2.0-1.redhat_00001.1.el9ea

and 191 more

● CVE-2022-25647

A flaw was found in gson, which is vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes. This issue may lead to availability attacks.

redhat/jenkins<2-plugins-0:4.13.1684911916-1.el8

redhat/eap7-gson<0:2.8.9-1.redhat_00001.1.el8ea

redhat/eap7<0:1-18.el9ea

redhat/eap7-activemq-artemis<0:2.16.0-9.redhat_00042.1.el9ea

redhat/eap7-activemq-artemis-native<1:1.0.2-1.redhat_00001.1.el9ea

redhat/eap7-aesh-extensions<0:1.8.0-1.redhat_00001.1.el9ea

and 203 more

● CVE-2022-24891

ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, there is a potential for a cross-site scripting vulnerability in E...

OWASP Enterprise Security API<2.3.0.0

Oracle WebLogic Server=12.2.1.3.0

Oracle WebLogic Server=12.2.1.4.0

Oracle WebLogic Server=14.1.1.0.0

Netapp Active Iq Unified Manager Linux

Netapp Active Iq Unified Manager Vmware Vsphere

and 2 more

● CVE-2022-23457

ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library. Prior to version 2.3.0.0, the default implementation of `Validator.getValidDirectoryPath(Str...

OWASP Enterprise Security API<2.3.0.0

Oracle WebLogic Server=12.2.1.3.0

Oracle WebLogic Server=12.2.1.4.0

Oracle WebLogic Server=14.1.1.0.0

Netapp Active Iq Unified Manager Linux

Netapp Active Iq Unified Manager Vmware Vsphere

and 2 more

● CVE-2022-22968

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively...

redhat/Spring Framework<5.3.19

redhat/Spring Framework<5.2.21

maven/org.springframework:spring-context<5.2.21

maven/org.springframework:spring-context>=5.3.0<5.3.19

VMware Spring Framework<5.2.0

VMware Spring Framework>=5.2.0<=5.2.20

and 10 more

● CVE-2022-1319

A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failur...

redhat/eap7-undertow<0:2.2.17-2.SP4_redhat_00001.1.el8ea

redhat/eap7-undertow<0:2.2.17-2.SP4_redhat_00001.1.el7ea

redhat/rh-sso7-keycloak<0:18.0.3-1.redhat_00001.1.el7

redhat/rh-sso7-keycloak<0:18.0.3-1.redhat_00001.1.el8

redhat/rh-sso7<0:1-5.el9

redhat/rh-sso7-javapackages-tools<0:6.0.0-7.el9

and 16 more

● CVE-2022-1259

A flaw was found in Undertow where a potential security issue in flow control handling by browser over HTTP/2 may potentially cause overhead or DOS in the server. The highest impact of this vulnerabil...

redhat/eap7-undertow<0:2.2.19-1.SP2_redhat_00001.1.el8ea

redhat/eap7-undertow<0:2.2.19-1.SP2_redhat_00001.1.el9ea

redhat/eap7-undertow<0:2.2.19-1.SP2_redhat_00001.1.el7ea

IBM Watson Knowledge Catalog on-prem<=4.x

Redhat Build Of Quarkus

Redhat Integration Camel K

and 12 more

● CVE-2022-26336

A shortcoming in the HMEF package of poi-scratchpad (Apache POI) allows an attacker to cause an Out of Memory exception. This package is used to read TNEF files (Microsoft Outlook and Microsoft Exchan...

Apache POI<5.2.1

Netapp Active Iq Unified Manager Linux

Netapp Active Iq Unified Manager Vmware Vsphere

Netapp Active Iq Unified Manager Windows

● CVE-2021-44228

Apache Log4j2 Remote Code Execution Vulnerability

debian/apache-log4j1.2

debian/apache-log4j2

debian/apache-log4j2<=2.13.3-1<=2.7-2<=2.11.1-2

Apple Xcode<13.3

Apache Log4j2

redhat/log4j<2.15.0

and 429 more

● CVE-2021-22096

In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries.

redhat/ovirt-dependencies<0:4.5.2-1.el8e

VMware Spring Framework>=5.2.0<=5.2.17

VMware Spring Framework>=5.3.0<=5.3.10

Netapp Active Iq Unified Manager Linux

Netapp Active Iq Unified Manager Vsphere

Netapp Active Iq Unified Manager Windows

and 6 more

● CVE-2021-35043

OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 as the replacement for...

Antisamy Project Antisamy<1.6.4

Oracle Retail Back Office=14.0

Oracle Retail Back Office=14.1

Oracle Retail Central Office=14.0

Oracle Retail Central Office=14.1

Oracle Retail Returns Management=14.0

and 22 more

● CVE-2021-36090

A flaw was found in apache-commons-compress. When reading a specially crafted ZIP archive, Compress can allocate large amounts of memory that leads to an out-of-memory error for small inputs. This fla...

redhat/apache-commons-compress<0:1.21-1.2.el8e

IBM Cloud Pak System<=V2.3.0 - V2.3.3.3 Interim Fix 1

redhat/apache-commons-compress<1.21

Apache Commons Compress>=1.0<1.21

Oracle Banking Apis>=18.1<=18.3

Oracle Banking Apis=19.1

and 69 more

● CVE-2021-35515

A flaw was found in apache-commons-compress. When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This flaw allo...

redhat/apache-commons-compress<0:1.21-1.2.el8e

redhat/apache-commons-compress<1.21

Apache Commons Compress>=1.6<=1.20

Netapp Active Iq Unified Manager Linux

Netapp Active Iq Unified Manager Vmware Vsphere

Netapp Active Iq Unified Manager Windows

and 43 more

● CVE-2021-35517

A flaw was found in apache-commons-compress. When reading a specially crafted TAR archive, Compress can allocate large amounts of memory that leads to an out-of-memory error for small inputs. This fla...

redhat/apache-commons-compress<0:1.21-1.2.el8e

redhat/apache-commons-compress<1.21

Apache Commons Compress>=1.1<=1.20

Netapp Active Iq Unified Manager Linux

Netapp Active Iq Unified Manager Vmware Vsphere

Netapp Active Iq Unified Manager Windows

and 50 more

● CVE-2021-35516

A flaw was found in apache-commons-compress. When reading a specially crafted 7Z archive, Compress can allocate large amounts of memory that leads to an out-of-memory error for very small inputs. This...

redhat/apache-commons-compress<0:1.21-1.2.el8e

redhat/apache-commons-compress<1.21

Apache Commons Compress>=1.6<=1.20

Netapp Active Iq Unified Manager Linux

Netapp Active Iq Unified Manager Vmware Vsphere

Netapp Active Iq Unified Manager Windows

and 43 more

● CVE-2021-34428

Eclipse Jetty could allow a physical attacker to bypass security restrictions, caused by a session ID is not invalidated flaw when an exception is thrown from the SessionListener#sessionDestroyed() me...

redhat/jenkins<0:2.289.3.1630554997-1.el8

IBM Cognos Command Center<=10.2.4.1

debian/jetty9

redhat/jetty<9.4.41

redhat/jetty<10.0.3

redhat/jetty<11.0.3

and 19 more

● CVE-2021-3597

A flaw was found in undertow where HTTP2SourceChannel fails to write final frame under some circumstances may result in DoS. The highest impact of this vulnerability is availability.

redhat/eap7-apache-commons-io<0:2.10.0-1.redhat_00001.1.el6ea

redhat/eap7-hal-console<0:3.2.16-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.20-4.SP2_redhat_00001.1.el6ea

redhat/eap7-ironjacamar<0:1.4.35-1.Final_redhat_00001.1.el6ea

redhat/eap7-jakarta-el<0:3.0.3-2.redhat_00006.1.el6ea

redhat/eap7-jberet<0:1.3.9-1.Final_redhat_00001.1.el6ea

and 65 more

● CVE-2021-28169

Eclipse Jetty could allow a remote attacker to obtain sensitive information, caused by a flaw in the ConcatServlet. By sending a specially-crafted request using a doubly encoded path, an attacker coul...

redhat/jenkins<0:2.289.3.1630554997-1.el8

IBM Cognos Command Center<=10.2.4.1

debian/jetty9

redhat/jetty<9.4.41

redhat/jetty<10.0.3

redhat/jetty<11.0.3

and 12 more

● CVE-2021-29425

Apache Commons IO could allow a remote attacker to traverse directories on the system, caused by improper input validation by the FileNameUtils.normalize method. An attacker could send a specially-cra...

redhat/eap7-apache-commons-io<0:2.10.0-1.redhat_00001.1.el6ea

redhat/eap7-hal-console<0:3.2.16-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.20-4.SP2_redhat_00001.1.el6ea

redhat/eap7-ironjacamar<0:1.4.35-1.Final_redhat_00001.1.el6ea

redhat/eap7-jakarta-el<0:3.0.3-2.redhat_00006.1.el6ea

redhat/eap7-jberet<0:1.3.9-1.Final_redhat_00001.1.el6ea

and 185 more

● CVE-2021-3629

redhat/eap7-apache-cxf<0:3.3.12-1.redhat_00001.1.el6ea

redhat/eap7-ironjacamar<0:1.5.3-1.Final_redhat_00001.1.el6ea

redhat/eap7-jakarta-el<0:3.0.3-3.redhat_00007.1.el6ea

redhat/eap7-jboss-ejb-client<0:4.0.43-1.Final_redhat_00001.1.el6ea

redhat/eap7-jboss-server-migration<0:1.7.2-10.Final_redhat_00011.1.el6ea

redhat/eap7-jsoup<0:1.14.2-1.redhat_00002.1.el6ea

and 50 more

● CVE-2021-23337

`lodash` versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

redhat/cockpit-ovirt<0:0.15.1-2.el8e

redhat/ovirt-engine-ui-extensions<0:1.2.6-1.el8e

redhat/ovirt-web-ui<0:1.6.9-1.el8e

redhat/nodejs-lodash<4.17.21

npm/lodash-template<=1.0.0

npm/lodash.template<=4.5.0

and 50 more

● CVE-2021-21290

### Impact When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. The CVSSv3.1 ...

maven/io.netty:netty<4.0.0

maven/org.jboss.netty:netty<4.0.0

maven/io.netty:netty-codec-http>=4.0.0<4.1.59.Final

redhat/qpid-proton<0:0.33.0-6.el7_9

redhat/qpid-proton<0:0.33.0-8.el8

redhat/eap7-artemis-wildfly-integration<0:1.0.4-1.redhat_00001.1.el6ea

and 91 more

● CVE-2021-20220

A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid ch...

redhat/eap7-activemq-artemis<0:2.9.0-9.redhat_00019.1.el6ea

redhat/eap7-bouncycastle<0:1.68.0-1.redhat_00001.1.el6ea

redhat/eap7-guava-failureaccess<0:1.0.1-1.redhat_00002.1.el6ea

redhat/eap7-guava-libraries<0:30.1.0-1.redhat_00001.1.el6ea

redhat/eap7-hal-console<0:3.2.13-1.Final_redhat_00001.1.el6ea

redhat/eap7-ironjacamar<0:1.4.27-1.Final_redhat_00001.1.el6ea

and 51 more

● CVE-2021-20190

A flaw was found in jackson-databind before 2.9.10.7 and 2.6.7.5. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data c...

IBM Disconnected Log Collector<=v1.0 - v1.8.2

redhat/jackson-databind<2.9.10.7

maven/com.fasterxml.jackson.core:jackson-databind<2.6.7.5

maven/com.fasterxml.jackson.core:jackson-databind>=2.7.0<2.9.10.7

FasterXML jackson-databind<2.6.7.5

FasterXML jackson-databind>=2.7.0<2.9.10.7

and 8 more

● CVE-2020-25711

A flaw was found in infinispan 10 REST API, where authorization permissions are not checked while performing some server management operations. When authz is enabled, any user with authentication can ...

redhat/Infinispan<11.0.6

Infinispan Infinispan<11.0.6

Redhat Data Grid=8.0

Netapp Active Iq Unified Manager Linux

Netapp Active Iq Unified Manager Vmware Vsphere

Netapp Active Iq Unified Manager Windows

● CVE-2020-25689

A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able ...

redhat/eap7-activemq-artemis<0:2.9.0-7.redhat_00017.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.9-12.SP13_redhat_00001.1.el6ea

redhat/eap7-hal-console<0:3.2.12-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.20-1.Final_redhat_00001.1.el6ea

redhat/eap7-httpcomponents-client<0:4.5.13-1.redhat_00001.1.el6ea

redhat/eap7-jboss-ejb-client<0:4.0.37-1.Final_redhat_00001.1.el6ea

and 63 more

● CVE-2020-13956

Apache HttpClient could allow a remote attacker to bypass security restrictions, caused by the improper handling of malformed authority component in request URIs. By passing request URIs to the librar...

redhat/eap7-activemq-artemis<0:2.9.0-7.redhat_00017.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.9-12.SP13_redhat_00001.1.el6ea

redhat/eap7-hal-console<0:3.2.12-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.20-1.Final_redhat_00001.1.el6ea

redhat/eap7-httpcomponents-client<0:4.5.13-1.redhat_00001.1.el6ea

redhat/eap7-jboss-ejb-client<0:4.0.37-1.Final_redhat_00001.1.el6ea

and 88 more

● CVE-2020-8908

A flaw was found in Guava that creates temporary directories with default permissions similar to /tmp. This issue may allow local users access, possibly permitting information exposure.

redhat/eap7-activemq-artemis<0:2.9.0-9.redhat_00019.1.el6ea

redhat/eap7-bouncycastle<0:1.68.0-1.redhat_00001.1.el6ea

redhat/eap7-guava-failureaccess<0:1.0.1-1.redhat_00002.1.el6ea

redhat/eap7-guava-libraries<0:30.1.0-1.redhat_00001.1.el6ea

redhat/eap7-hal-console<0:3.2.13-1.Final_redhat_00001.1.el6ea

redhat/eap7-ironjacamar<0:1.4.27-1.Final_redhat_00001.1.el6ea

and 69 more

● CVE-2020-24616

FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).

maven/com.fasterxml.jackson.core:jackson-databind>=2.0.0<=2.9.10.5

IBM ISAM<=9.0.7

IBM Security Verify Access<=10.0.0

FasterXML jackson-databind>=2.0.0<2.9.10.6

Netapp Active Iq Unified Manager Linux

Netapp Active Iq Unified Manager Vmware Vsphere

and 30 more

● CVE-2020-36518

A flaw was found in the Jackson Databind package. This cause of the issue is due to a Java StackOverflow exception and a denial of service via a significant depth of nested objects.

debian/jackson-databind<=2.9.8-3+deb10u3

redhat/jackson-databind<0:2.14.1-2.el9

redhat/eap7-jackson-databind<0:2.12.6.1-1.redhat_00003.1.el8ea

redhat/eap7-jackson-databind<0:2.12.6.1-1.redhat_00003.1.el7ea

redhat/rh-sso7-keycloak<0:15.0.8-1.redhat_00001.1.el7

redhat/rh-sso7-keycloak<0:15.0.8-1.redhat_00001.1.el8

and 88 more

● CVE-2020-8574

Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocation (JMX RMI) service enabled allowing unauthorized code execution to local users...

Netapp Active Iq Unified Manager Linux<9.6

● CVE-2020-14195

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind mishandles the interaction between serialization gadgets and typing. The highest threat from this vul...

redhat/candlepin<0:2.6.16-1.el7

redhat/foreman<0:1.22.0.39-2.el7

redhat/satellite<0:6.6.3-1.el7

redhat/tfm-rubygem-fog-ovirt<0:1.2.3-1.el7

redhat/tfm-rubygem-katello<0:3.12.0.41-1.el7

redhat/tfm-rubygem-runcible<0:2.13.0-1.el7

and 311 more

● CVE-2020-14060

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data co...

redhat/candlepin<0:2.6.16-1.el7

redhat/foreman<0:1.22.0.39-2.el7

redhat/satellite<0:6.6.3-1.el7

redhat/tfm-rubygem-fog-ovirt<0:1.2.3-1.el7

redhat/tfm-rubygem-katello<0:3.12.0.41-1.el7

redhat/tfm-rubygem-runcible<0:2.13.0-1.el7

and 30 more

● CVE-2020-14062

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this...

redhat/candlepin<0:2.6.16-1.el7

redhat/foreman<0:1.22.0.39-2.el7

redhat/satellite<0:6.6.3-1.el7

redhat/tfm-rubygem-fog-ovirt<0:1.2.3-1.el7

redhat/tfm-rubygem-katello<0:3.12.0.41-1.el7

redhat/tfm-rubygem-runcible<0:2.13.0-1.el7

and 309 more

● CVE-2020-7656

A flaw was found in jquery in versions prior to 1.9.0. A cross-site scripting attack is possible as the load method fails to recognize and remove "<script>" HTML tags that contain a whitespace charact...

maven/org.webjars.npm:jquery<1.9.0

rubygems/jquery-rails<2.2.0

nuget/jQuery<1.9.0

npm/jquery<1.9.0

redhat/qpid-dispatch<0:1.13.0-3.el6_10

redhat/qpid-dispatch<0:1.13.0-3.el7

and 14 more

● CVE-2020-14061

redhat/candlepin<0:2.6.16-1.el7

redhat/foreman<0:1.22.0.39-2.el7

redhat/satellite<0:6.6.3-1.el7

redhat/tfm-rubygem-fog-ovirt<0:1.2.3-1.el7

redhat/tfm-rubygem-katello<0:3.12.0.41-1.el7

redhat/tfm-rubygem-runcible<0:2.13.0-1.el7

and 311 more

● CVE-2020-10719

A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an attacker to take advantage of HTTP request sm...

redhat/eap7-activemq-artemis<0:2.9.0-4.redhat_00010.1.el6ea

redhat/eap7-apache-cxf<0:3.2.12-1.redhat_00001.1.el6ea

redhat/eap7-bouncycastle<0:1.60.0-2.redhat_00002.1.el6ea

redhat/eap7-codehaus-jackson<0:1.9.13-10.redhat_00007.1.el6ea

redhat/eap7-cryptacular<0:1.2.4-1.redhat_00001.1.el6ea

redhat/eap7-glassfish-el<0:3.0.1-5.b08_redhat_00004.1.el6ea

and 278 more

● CVE-2020-11620

A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as...

redhat/rh-maven35-jackson-databind<0:2.7.6-2.10.el7

IBM Data Risk Manager<=2.0.6

redhat/jackson-databind<2.9.10.4

maven/com.fasterxml.jackson.core:jackson-databind>=2.9.0<=2.9.10.3

FasterXML jackson-databind>=2.9.0<2.9.10.4

Debian Debian Linux=8.0

and 29 more

● CVE-2020-11619

redhat/candlepin<0:2.6.16-1.el7

redhat/foreman<0:1.22.0.39-2.el7

redhat/satellite<0:6.6.3-1.el7

redhat/tfm-rubygem-fog-ovirt<0:1.2.3-1.el7

redhat/tfm-rubygem-katello<0:3.12.0.41-1.el7

redhat/tfm-rubygem-runcible<0:2.13.0-1.el7

and 325 more

Latest netapp active iq unified manager linux Vulnerabilities

Company

Resources

Contact