Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 654

Export CSV
CVE-2019-10241

jetty: using specially formatted URL against DefaultServlet or ResourceHandler leads to XSS conditions

In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.

CVSS 3.1 · 6.1 Medium EPSS 9.4% KEV · Not listed
Vendors
Apache Debian Eclipse and 2 more
Products
Activemq Drill Debian Linux and 6 more
CVE-2019-10212

undertow: DEBUG log for io.undertow.request.security if enabled leaks credentials to log files

A flaw was found in, all under 2.0.20, in the Undertow DEBUG log for io.undertow.request.security. If enabled, an attacker could abuse this flaw to obtain the user's credentials from the log files.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Netapp Redhat
Products
Active Iq Unified Manager Enterprise Linux Jboss Data Grid and 6 more
CVE-2019-10202

codehaus: incomplete fix for unsafe deserialization in jackson-databind vulnerabilities

A series of deserialization vulnerabilities have been discovered in Codehaus 1.9.x implemented in EAP 7. This CVE fixes CVE-2017-17485, CVE-2017-7525, CVE-2017-15095, CVE-2018-5968, CVE-2018-7489, CVE-2018-1000873, CVE-2019-12086 reported for FasterXML jackson-databind by implementing a whitelist approach that will mitigate these vulnerabilities and future ones alike.

CVSS 3.1 · 9.8 Critical EPSS 5.2% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Jboss Enterprise Application Platform Jboss Fuse
CVE-2019-10184

undertow: Information leak in requests for directories without trailing slashes

undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api.

CVSS 3.1 · 7.5 High EPSS 3.5% KEV · Not listed
Vendors
Netapp Redhat
Products
Active Iq Unified Manager Enterprise Linux Jboss Data Grid and 7 more
CVE-2019-10174

infinispan: invokeAccessibly method from ReflectionUtil class allows to invoke private methods

A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any class with Infinispan's privileges. The attacker can use reflection to introduce new, malicious behavior into the application.

CVSS 3.1 · 8.8 High EPSS 3.1% KEV · Not listed
Vendors
Infinispan Netapp Redhat
Products
Infinispan Active Iq Unified Manager Enterprise Linux and 9 more
CVE-2019-10172

jackson-mapper-asl: XML external entity similar to CVE-2016-3720

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes.

CVSS 3.1 · 7.5 High EPSS 17.0% KEV · Not listed
Vendors
Apache Debian Fasterxml and 1 more
Products
Spark Debian Linux Jackson-mapper-asl and 5 more
CVE-2019-0205

thrift: Endless loop when feed with specific input data

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings.

CVSS 3.1 · 7.5 High EPSS 9.2% KEV · Not listed
Vendors
Apache Oracle Redhat
Products
Thrift Communications Cloud Native Core Network Slice Selection Function Enterprise Linux Server and 6 more
CVE-2019-0204

mesos: docker image code execution

A specifically crafted Docker image running under the root user can overwrite the init helper binary of the container runtime and/or the command executor in Apache Mesos versions pre-1.4.x, 1.4.0 to 1.4.2, 1.5.0 to 1.5.2, 1.6.0 to 1.6.1, and 1.7.0 to 1.7.1. A malicious actor can therefore gain root-level code execution on the host.

CVSS 3.1 · 7.8 High EPSS 2.7% KEV · Not listed
Vendors
Apache Redhat
Products
Mesos Fuse Jboss Fuse
CVE-2019-0201

zookeeper: Information disclosure in Apache ZooKeeper

An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any permission when retrieves the ACLs of the requested node and returns all information contained in the ACL Id field as plaintext string. DigestAuthenticationProvider overloads the Id field with the hash value that is used for user authentication. As a consequence, if Digest Authentication is in use, the unsalted hash value will be disclosed by getACL() request for unauthenticated or unprivileged users.

CVSS 3.1 · 5.9 Medium EPSS 9.7% KEV · Not listed
Vendors
Apache Debian Netapp and 2 more
Products
Activemq Drill Zookeeper and 11 more
CVE-2019-0194

camel: Directory traversal in file producer

Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x (2.19 and earlier) versions may be also affected.

CVSS 3.0 · 7.5 High EPSS 8.5% KEV · Not listed
Vendors
Apache Redhat
Products
Camel Jboss Fuse
CVE-2019-0192

solr: remote code execution due to unsafe deserialization

In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side.

CVSS 3.0 · 9.8 Critical EPSS 78.2% KEV · Not listed
Vendors
Apache Netapp Redhat
Products
Solr Storage Automation Store Jboss Fuse
CVE-2018-9159

spark: Absolute and relative pathnames allow for unintended static file disclosure

In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by file: URLs and directory traversal sequences. NOTE: this product is unrelated to Ignite Realtime Spark.

CVSS 3.0 · 5.3 Medium EPSS 4.4% KEV · Not listed
Vendors
Redhat Sparkjava
Products
Jboss Amq Jboss Fuse Spark
CVE-2018-8088

slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.

CVSS 3.1 · 9.8 Critical EPSS 14.7% KEV · Not listed
Vendors
Oracle Qos Redhat
Products
Goldengate Application Adapters Goldengate Stream Analytics Utilities Framework and 20 more
CVE-2018-8041

camel-mail: path traversal vulnerability

Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal.

CVSS 3.0 · 5.3 Medium EPSS 9.6% KEV · Not listed
Vendors
Apache Redhat
Products
Camel Jboss Fuse
CVE-2018-8039

apache-cxf: TLS hostname verification does not work correctly with com.sun.net.ssl.*

It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");'. When this system property is set, CXF uses some reflection to try to make the HostnameVerifier work with the old com.sun.net.ssl.HostnameVerifier interface. However, the default HostnameVerifier implementation in CXF does not implement the method in this interface, and an exception is thrown. However, in Apache CXF prior to 3.2.5 and 3.1.16 the exception is caught in the reflection code and not properly propagated. What this means is that if you are using the com.sun.net.ssl stack with CXF, an error with TLS hostname verification will not be thrown, leaving a CXF client subject to man-in-the-middle attacks.

CVSS 3.0 · 8.1 High EPSS 8.2% KEV · Not listed
Vendors
Apache Redhat
Products
Cxf Enterprise Linux Jboss Amq and 3 more
CVE-2018-8036

pdfbox: Infinite loop in AFMParser.java allows for out of memory erros via crafted PDF

In Apache PDFBox 1.8.0 to 1.8.14 and 2.0.0RC1 to 2.0.10, a carefully crafted (or fuzzed) file can trigger an infinite loop which leads to an out of memory exception in Apache PDFBox's AFMParser.

CVSS 3.0 · 6.5 Medium EPSS 3.9% KEV · Not listed
Vendors
Apache Redhat
Products
Pdfbox Jboss Fuse
CVE-2018-8034

tomcat: Host name verification missing in WebSocket client

The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88.

CVSS 3.1 · 7.5 High EPSS 21.0% KEV · Not listed
Vendors
Apache Canonical Debian and 2 more
Products
Tomcat Ubuntu Linux Debian Linux and 5 more
CVE-2018-8018

ignite: Improper deserialization allows for code execution via GridClientJdkMarshaller endpoint

In Apache Ignite before 2.4.8 and 2.5.x before 2.5.3, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one sends a specially prepared form of a serialized object to GridClientJdkMarshaller deserialization endpoint.

CVSS 3.0 · 9.8 Critical EPSS 6.7% KEV · Not listed
Vendors
Apache Redhat
Products
Ignite Jboss Fuse
CVE-2018-8009

hadoop: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file

Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is exploitable via the zip slip vulnerability in places that accept a zip file.

CVSS 3.0 · 8.8 High EPSS 6.7% KEV · Not listed
Vendors
Apache Redhat
Products
Hadoop Jboss Fuse