Latest redhat process automation Vulnerabilities

● CVE-2023-44487

- Rapid Reset HTTP/2 vulnerability

Microsoft Windows 11=21H2

Microsoft Windows Server 2022

Microsoft Windows 11=22H2

and 556 more

● CVE-2023-1108

Undertow: infinite loop in sslconduit during close

redhat/eap7-undertow<0:2.2.22-1.SP3_redhat_00002.1.el8ea

redhat/eap7-wildfly<0:7.4.9-6.GA_redhat_00004.1.el8ea

redhat/eap7-undertow<0:2.2.23-1.SP2_redhat_00001.1.el8ea

redhat/eap7-undertow-jastow<0:2.0.14-1.Final_redhat_00001.1.el8ea

redhat/eap7-undertow<0:2.2.22-1.SP3_redhat_00002.1.el9ea

redhat/eap7-wildfly<0:7.4.9-6.GA_redhat_00004.1.el9ea

and 54 more

● CVE-2022-1415

Drools: unsafe data deserialization in streamutils

maven/org.drools:drools-core<7.69.0.Final

Redhat Decision Manager=7.0

Redhat Drools=7.69.0

Redhat Jboss Middleware Text-only Advisories

Redhat Process Automation=7.0

redhat/drools<7.69.0.

and 4 more

● CVE-2022-0853

A flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss client-side, when using UserTransaction repeatedly and leads to information leakage vulnerability.

redhat/eap7-wildfly-http-client<0:1.1.11-1.SP1_redhat_00001.1.el8ea

redhat/eap7-wildfly-http-client<0:1.1.11-1.SP1_redhat_00001.1.el7ea

redhat/rh-sso7-keycloak<0:18.0.3-1.redhat_00001.1.el7

redhat/rh-sso7-keycloak<0:18.0.3-1.redhat_00001.1.el8

redhat/rh-sso7<0:1-5.el9

redhat/rh-sso7-javapackages-tools<0:6.0.0-7.el9

and 6 more

● CVE-2021-4178

fabric8 Kubernetes client had an arbitrary code execution flaw in versions 5.0.0-beta-1 and higher. Attackers could potentially insert malicious YAMLs due to misconfigured YAML parsing.

redhat/kubernetes-client<5.0.3

redhat/kubernetes-client<5.1.2

redhat/kubernetes-client<5.3.2

redhat/kubernetes-client<5.4.2

redhat/kubernetes-client<5.7.4

redhat/kubernetes-client<5.8.1

and 25 more

● CVE-2021-4104

Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2

redhat/log4j<0:1.2.14-6.5.el6_10

redhat/log4j<0:1.2.17-17.el7_4

redhat/log4j<0:1.2.17-16.el7_3

redhat/log4j-eap6<0:1.2.17-3.redhat_00008.1.ep6.el6

redhat/log4j-jboss-logmanager<0:1.1.4-3.Final_redhat_00002.1.ep6.el6

redhat/jboss-as-appclient<0:7.5.24-2.Final_redhat_00001.1.ep6.el6

and 219 more

● CVE-2021-3642

A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled. The highest th...

redhat/eap7-apache-cxf<0:3.3.12-1.redhat_00001.1.el6ea

redhat/eap7-ironjacamar<0:1.5.3-1.Final_redhat_00001.1.el6ea

redhat/eap7-jakarta-el<0:3.0.3-3.redhat_00007.1.el6ea

redhat/eap7-jboss-ejb-client<0:4.0.43-1.Final_redhat_00001.1.el6ea

redhat/eap7-jboss-server-migration<0:1.7.2-10.Final_redhat_00011.1.el6ea

redhat/eap7-jsoup<0:1.14.2-1.redhat_00002.1.el6ea

and 47 more

● CVE-2021-20218

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to ext...

redhat/jenkins<2-plugins-0:4.7.1616671397-1.el8

Redhat Kubernetes-client>=4.2.0<4.7.2

Redhat Kubernetes-client>=4.8.0<4.11.2

Redhat Kubernetes-client>=4.12.0<4.13.2

Redhat Kubernetes-client>=5.0.0<5.0.2

Redhat A-mq Online

and 7 more

● CVE-2020-10714

A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a session fixation attack. T...

Redhat Wildfly Elytron<1.11.3

Redhat Codeready Studio=12.0

Redhat Descision Manager=7.0

Redhat Jboss Fuse=7.0.0

Redhat Process Automation=7.0

NetApp OnCommand Insight

and 108 more

● CVE-2020-1748

A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an i...

redhat/eap7-dom4j<0:2.1.3-1.redhat_00001.1.el6ea

redhat/eap7-elytron-web<0:1.2.5-1.Final_redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-13.SP3_redhat_00011.1.el6ea

redhat/eap7-hal-console<0:3.0.23-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.17-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate-validator<0:6.0.20-1.Final_redhat_00001.1.el6ea

and 105 more

● CVE-2019-14862

Knockout is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page whic...

Knockoutjs Knockout<=3.4.2

Redhat Decision Manager=7.0

Redhat Process Automation=7.0

Oracle Business Intelligence=5.5.0.0.0

Oracle Business Intelligence=12.2.1.3.0

Oracle Business Intelligence=12.2.1.4.0

and 1 more

● CVE-2019-14863

Angular.js is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page wh...

IBM Cloud Pak for Business Automation<=V22.0.2 - V22.0.2-IF004

IBM Cloud Pak for Business Automation<=V21.0.3 - V21.0.3-IF020

IBM Cloud Pak for Business Automation<=V22.0.1 - V22.0.1-IF006 and later fixesV21.0.2 - V21.0.2-IF012 and later fixesV21.0.1 - V21.0.1-IF007 and later fixesV20.0.1 - V20.0.3 and later fixesV19.0.1 - V19.0.3 and later fixesV18.0.0 - V18.0.2 and later fixes

Angularjs Angular.js>=1.0.0<=1.4.14

Redhat Decision Manager=7.0

Redhat Process Automation=7.0

● CVE-2019-14892

A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5, and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 ...

FasterXML jackson-databind>=2.0.0<2.6.7.3

FasterXML jackson-databind>=2.7.0<2.8.11.5

FasterXML jackson-databind>=2.9.0<2.9.10

Redhat Decision Manager=7.0

Redhat Jboss Data Grid

Redhat Jboss Data Grid=7.0.0

and 86 more

● CVE-2019-14839

It was observed that while login into Business-central console, HTTP request discloses sensitive information like username and password when intercepted using some tool like burp suite etc.

Redhat Business-central<=7.48.0

Redhat Descision Manager=7.0

Redhat Process Automation=7.0

● CVE-2019-14841

Redhat Decision Manager=7.0

Redhat Process Automation=7.0

● CVE-2020-1714

A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks. This flaw allows an attacker to inject arbitrarily serialized Java Obj...

maven/org.keycloak:keycloak-common<11.0.0

maven/org.keycloak:keycloak-core<11.0.0

Redhat Keycloak<11.0.0

Redhat Decision Manager=7.0

Redhat Jboss Fuse=7.0.0

Redhat Openshift Application Runtimes

and 3 more

Latest redhat process automation Vulnerabilities

Company

Resources

Contact