Export limit exceeded: 425850 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 654

Export CSV
CVE-2017-5929

logback: Serialization vulnerability in SocketServer and ServerSocketReceiver

QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

CVSS 3.1 · 9.8 Critical EPSS 7.5% KEV · Not listed
Vendors
Qos Redhat
Products
Logback Jboss Amq Jboss Bpms and 4 more
CVE-2017-5643

camel-core: Validation component vulnerable to SSRF via remote DTDs and XXE

Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.

CVSS 3.0 · 7.4 High EPSS 5.9% KEV · Not listed
Vendors
Apache Redhat
Products
Camel Jboss Amq Jboss Fuse
CVE-2015-7501

apache-commons-collections: InvokerTransformer code execution during deserialisation

Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.

CVSS 3.0 · 9.8 Critical EPSS 85.6% KEV · Not listed
Vendors
Redhat
Products
Data Grid Enterprise Linux Jboss A-mq and 19 more
CVE-2017-5653

cxf: CXF JAX-RS XML Security streaming clients do not validate that the service response was signed or encrypted

JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers.

CVSS 3.0 · 5.3 Medium EPSS 11.2% KEV · Not listed
Vendors
Apache Redhat
Products
Cxf Jboss Amq Jboss Fuse
CVE-2017-5656

cxf: CXF's STSClient uses a flawed way of caching tokens that are associated with delegation tokens

Apache CXF's STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker could craft a token which would return an identifer corresponding to a cached token for another user.

CVSS 3.0 · 7.5 High EPSS 6.8% KEV · Not listed
Vendors
Apache Redhat
Products
Cxf Jboss Amq Jboss Fuse and 1 more
CVE-2014-0121

hawtio-karaf-terminal: remote code execution due to missing authentication

The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter.

CVSS 3.0 · 9.8 Critical EPSS 4.0% KEV · Not listed
Vendors
Hawt Redhat
Products
Hawtio Jboss Fuse
CVE-2014-0120

hawtio-karaf-terminal: cross-site request forgery (CSRF)

Cross-site request forgery (CSRF) vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running "shutdown -f."

CVSS 3.0 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Hawt Redhat
Products
Hawtio Jboss Fuse
CVE-2017-5662

batik: XML external entity processing vulnerability

In Apache Batik before 1.9, files lying on the filesystem of the server which uses batik can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is running. If the user is root a full compromise of the server - including confidential or sensitive files - would be possible. XXE can also be used to attack the availability of the server via denial of service as the references within a xml document can trivially trigger an amplification attack.

CVSS 3.0 · 7.3 High EPSS 4.1% KEV · Not listed
Vendors
Apache Redhat
Products
Batik Jboss Amq Jboss Bpms and 2 more
CVE-2012-6153

CXF: SSL hostname verification bypass, incomplete CVE-2012-5783 fix

http/conn/ssl/AbstractVerifier.java in Apache Commons HttpClient before 4.2.3 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field. NOTE: this issue exists because of an incomplete fix for CVE-2012-5783.

CVSS 2.0 · 4.3 Medium EPSS 5.8% KEV · Not listed
Vendors
Apache Redhat
Products
Commons-httpclient Developer Toolset Jboss Bpms and 10 more
CVE-2016-9878

Framework: Directory Traversal in the Spring Framework ResourceServlet

An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks.

CVSS 3.0 · 7.5 High EPSS 4.9% KEV · Not listed
Vendors
Pivotal Software Redhat Vmware
Products
Spring Framework Jboss Amq Jboss Fuse and 1 more
CVE-2016-9177

Spark: Directory traversal vulnerability in version 2.5

Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

CVSS 3.0 · 7.5 High EPSS 5.1% KEV · Not listed
Vendors
Redhat Sparkjava
Products
Jboss Amq Jboss Fuse Spark
CVE-2016-2510

bsh2: remote code execution via deserialization

BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.

CVSS 3.1 · 8.1 High EPSS 70.4% KEV · Not listed
Vendors
Beanshell Canonical Debian and 1 more
Products
Beanshell Ubuntu Linux Debian Linux and 5 more
CVE-2016-2175

pdfbox: XML External Entity vulnerability

Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted PDF.

CVSS 3.0 · 7.8 High EPSS 3.8% KEV · Not listed
Vendors
Apache Debian Redhat
Products
Pdfbox Debian Linux Jboss Amq and 4 more
CVE-2016-2141

JGroups: Authorization bypass

It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. An attacker could use this flaw to bypass security restrictions, and use this vulnerability to send and receive messages within the cluster, leading to information disclosure, message spoofing, or further possible attacks.

CVSS 3.1 · 9.8 Critical EPSS 4.7% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Jboss Data Grid Jboss Data Virtualization and 8 more
CVE-2016-0782

activemq: Cross-site scripting vulnerabilities in web console

The administration web console in Apache ActiveMQ 5.x before 5.11.4, 5.12.x before 5.12.3, and 5.13.x before 5.13.2 allows remote authenticated users to conduct cross-site scripting (XSS) attacks and consequently obtain sensitive information from a Java memory dump via vectors related to creating a queue.

CVSS 3.0 · 5.4 Medium EPSS 6.1% KEV · Not listed
Vendors
Apache Redhat
Products
Activemq Jboss Amq Jboss Fuse
CVE-2016-0734

activemq: Clickjacking in Web Console

The web-based administration console in Apache ActiveMQ 5.x before 5.13.2 does not send an X-Frame-Options HTTP header, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web page that contains a (1) FRAME or (2) IFRAME element.

CVSS 3.0 · 6.1 Medium EPSS 8.6% KEV · Not listed
Vendors
Apache Redhat
Products
Activemq Jboss Amq Jboss Fuse
CVE-2015-7940

bouncycastle: Invalid curve attack allowing to extract private keys

The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve attack."

CVSS 3.0 · 3.7 Low EPSS 4.7% KEV · Not listed
Vendors
Bouncycastle Opensuse Oracle and 1 more
Products
Bouncy Castle Crypto Package Leap Opensuse and 6 more
CVE-2015-5348

Camel: Java object deserialisation in Jetty/Servlet

Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.

CVSS 3.0 · 8.1 High EPSS 6.4% KEV · Not listed
Vendors
Apache Redhat
Products
Camel Jboss Fuse
CVE-2015-5344

camel-xstream: Java object de-serialization vulnerability leads to RCE

The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.

CVSS 3.0 · 9.8 Critical EPSS 7.1% KEV · Not listed
Vendors
Apache Redhat
Products
Camel Jboss Fuse