Filters
Redhat Jboss Enterprise Application PlatformUndertow: improper state management in proxy protocol parsing causes information leakage
7.5
EPSS
0.10%
First published (updated )
maven/org.infinispan:infinispan-cachestore-jdbcInfinispan: credentials returned from configuration as clear text
7.2
First published (updated )
Redhat Data GridInfinispan: circular reference on marshalling leads to dos
6.5
First published (updated )
Netty NettyHotrod-client: hot rod client does not enable hostname validation when using tls that lead to a mitm attack
7.4
First published (updated )
maven/org.infinispan:infinispan-server-restInfinispan: non-admins should not be able to get cache config via rest api
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
maven/org.infinispan:infinispan-server-restInfispan: rest bulk ops don't check permissions
6.5
First published (updated )
redhat/eap7-wildfly-elytronA flaw was found in Wildfly Elytron where ScramServer may be susceptible to Timing Attack if enabled…
5.3
First published (updated )
Redhat Data GridA flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0 thro…
9.8
First published (updated )
redhat/InfinispanA flaw was found in infinispan 10 REST API, where authorization permissions are not checked while pe…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/eap7-activemq-artemisA memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes a…
7.5
First published (updated )
Redhat Wildfly CoreIt was found that Wildfly users had default user permissions set incorrectly. A malicious user could…
5.2
First published (updated )
Redhat Jboss Enterprise Application PlatformIt was found that the Apache commons-collections library permitted code execution when deserializing…
10
First published (updated )