Export limit exceeded: 425850 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 654

Export CSV
CVE-2016-8749

camel-jacksonxml: Unmarshalling operation are vulnerable to RCE

Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.

CVSS 3.0 · 9.8 Critical EPSS 10.6% KEV · Not listed
Vendors
Apache Redhat
Products
Camel Jboss Amq Jboss Fuse
CVE-2016-8739

apache-cxf: Atom entity provider of Apache CXF JAX-RS is vulnerable to XXE

The JAX-RS module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 provides a number of Atom JAX-RS MessageBodyReaders. These readers use Apache Abdera Parser which expands XML entities by default which represents a major XXE risk.

CVSS 3.0 · 7.5 High EPSS 7.3% KEV · Not listed
Vendors
Apache Redhat
Products
Cxf Jboss Amq Jboss Fuse
CVE-2016-6812

apache-cxf: XSS in Apache CXF FormattedServiceListWriter

The HTTP transport module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 uses FormattedServiceListWriter to provide an HTML page which lists the names and absolute URL addresses of the available service endpoints. The module calculates the base URL using the current HttpServletRequest. The calculated base URL is used by FormattedServiceListWriter to build the service endpoint absolute URLs. If the unexpected matrix parameters have been injected into the request URL then these matrix parameters will find their way back to the client in the services list page which represents an XSS risk to the client.

CVSS 3.0 · 6.1 Medium EPSS 7.5% KEV · Not listed
Vendors
Apache Redhat
Products
Cxf Jboss Amq Jboss Fuse
CVE-2016-5725

jsch: ChannelSftp path traversal vulnerability

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a recursive GET command.

CVSS 3.0 · 5.9 Medium EPSS 24.1% KEV · Not listed
Vendors
Jcraft Microsoft Redhat
Products
Jsch Windows Jboss Amq and 1 more
CVE-2016-5003

xmlrpc: Deserialization of untrusted Java object through <ex:serializable> tag

The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.

CVSS 3.0 · 9.8 Critical EPSS 14.9% KEV · Not listed
Vendors
Apache Redhat
Products
Ws-xmlrpc Enterprise Linux Jboss Fuse and 1 more
CVE-2016-5002

xmlrpc: XML external entity vulnerability SSRF via a crafted DTD

XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted DTD.

CVSS 3.0 · 7.8 High EPSS 8.3% KEV · Not listed
Vendors
Apache Redhat
Products
Xml-rpc Jboss Fuse
CVE-2016-4970

netty: Infinite loop vulnerability when handling renegotiation using SslProvider.OpenSsl

handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).

CVSS 3.1 · 7.5 High EPSS 11.3% KEV · Not listed
Vendors
Apache Netty Redhat
Products
Cassandra Netty Jboss Amq and 3 more
CVE-2014-0225

Framework: Information disclosure via SSRF

When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references in a DTD declaration. This enabled an XXE attack.

CVSS 3.0 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Pivotal Software Redhat Vmware
Products
Spring Framework Jboss Amq Jboss Fuse and 1 more
CVE-2015-7501

apache-commons-collections: InvokerTransformer code execution during deserialisation

Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

CVSS 3.0 · 9.8 Critical EPSS 85.6% KEV · Not listed
Vendors
Redhat
Products
Data Grid Enterprise Linux Jboss A-mq and 19 more
CVE-2014-0121

hawtio-karaf-terminal: remote code execution due to missing authentication

The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter.

CVSS 3.0 · 9.8 Critical EPSS 4.0% KEV · Not listed
Vendors
Hawt Redhat
Products
Hawtio Jboss Fuse
CVE-2015-5183

Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ

Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Redhat
Products
Amq Amq Broker Jboss A-mq and 3 more
CVE-2014-0120

hawtio-karaf-terminal: cross-site request forgery (CSRF)

Cross-site request forgery (CSRF) vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running "shutdown -f."

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Hawt Redhat
Products
Hawtio Jboss Fuse
CVE-2015-3254

thrift: Infinite recursion via vectors involving the skip function

The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service (infinite recursion) via vectors involving the skip function.

CVSS 3.0 · 6.5 Medium EPSS 5.3% KEV · Not listed
Vendors
Apache Redhat
Products
Thrift Jboss Amq Jboss Data Virtualization and 1 more
CVE-2017-8028

spring-ldap: Authentication with userSearch and STARTTLS allows authentication with arbitrary password

In Pivotal Spring-LDAP versions 1.3.0 - 2.3.1, when connected to some LDAP servers, when no additional attributes are bound, and when using LDAP BindAuthenticator with org.springframework.ldap.core.support.DefaultTlsDirContextAuthenticationStrategy as the authentication strategy, and setting userSearch, authentication is allowed with an arbitrary password when the username is correct. This occurs because some LDAP vendors require an explicit operation for the LDAP bind to take effect.

CVSS 3.0 · 8.1 High EPSS 2.6% KEV · Not listed
Vendors
Debian Pivotal Software Redhat
Products
Debian Linux Spring-ldap Jboss Amq and 1 more
CVE-2015-0226

wss4j: Apache WSS4J is vulnerable to Bleichenbacher's attack (incomplete fix for CVE-2011-2487)

Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series of crafted messages. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-2487.

CVSS 3.0 · 7.5 High EPSS 5.5% KEV · Not listed
Vendors
Apache Redhat
Products
Wss4j Jboss Amq Jboss Data Grid and 4 more
CVE-2017-5929

logback: Serialization vulnerability in SocketServer and ServerSocketReceiver

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

CVSS 3.1 · 9.8 Critical EPSS 7.5% KEV · Not listed
Vendors
Qos Redhat
Products
Logback Jboss Amq Jboss Bpms and 4 more
CVE-2017-5662

batik: XML external entity processing vulnerability

In Apache Batik before 1.9, files lying on the filesystem of the server which uses batik can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is running. If the user is root a full compromise of the server - including confidential or sensitive files - would be possible. XXE can also be used to attack the availability of the server via denial of service as the references within a xml document can trivially trigger an amplification attack.

CVSS 3.0 · 7.3 High EPSS 4.1% KEV · Not listed
Vendors
Apache Redhat
Products
Batik Jboss Amq Jboss Bpms and 2 more
CVE-2017-5656

cxf: CXF's STSClient uses a flawed way of caching tokens that are associated with delegation tokens

Apache CXF's STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker could craft a token which would return an identifer corresponding to a cached token for another user.

CVSS 3.0 · 7.5 High EPSS 6.8% KEV · Not listed
Vendors
Apache Redhat
Products
Cxf Jboss Amq Jboss Fuse and 1 more