Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 654

Export CSV
CVE-2018-11796

tika: Incomplete fix allows for XML entity expansion resulting in denial of service

In Apache Tika 1.19 (CVE-2018-11761), we added an entity expansion limit for XML parsing. However, Tika reuses SAXParsers and calls reset() after each parse, which, for Xerces2 parsers, as per the documentation, removes the user-specified SecurityManager and thus removes entity expansion limits after the first parse. Apache Tika versions from 0.1 to 1.19 are therefore still vulnerable to entity expansions which can lead to a denial of service attack. Users should upgrade to 1.19.1 or later.

CVSS 3.0 · 7.5 High EPSS 7.5% KEV · Not listed
Vendors
Apache Redhat
Products
Tika Jboss Fuse
CVE-2018-11775

activemq: ActiveMQ Client Missing TLS Hostname Verification

TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.

CVSS 3.0 · 7.4 High EPSS 7.0% KEV · Not listed
Vendors
Apache Oracle Redhat
Products
Activemq Enterprise Repository Flexcube Private Banking and 1 more
CVE-2018-11771

apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip

When reading a specially crafted ZIP archive, the read method of Apache Commons Compress 1.7 to 1.17's ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached. When combined with a java.io.InputStreamReader this can lead to an infinite stream, which can be used to mount a denial of service attack against services that use Compress' zip package.

CVSS 3.1 · 5.5 Medium EPSS 5.3% KEV · Not listed
Vendors
Apache Oracle Redhat
Products
Commons Compress Weblogic Server Jboss Fuse
CVE-2018-10899

jolokia: system-wide CSRF that could lead to Remote Code Execution

A flaw was found in Jolokia versions from 1.2 to before 1.6.1. Affected versions are vulnerable to a system-wide CSRF. This holds true for properly configured instances with strict checking for origin and referrer headers. This could result in a Remote Code Execution attack.

CVSS 3.0 · 8.1 High EPSS 2.7% KEV · Not listed
Vendors
Jolokia Redhat
Products
Jolokia Jboss Amq Jboss Fuse and 1 more
CVE-2018-1000873

jackson-modules-java8: DoS due to an Improper Input Validation

Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very large values in the nanoseconds field of a time value. This vulnerability appears to have been fixed in 2.9.8.

CVSS 3.1 · 6.5 Medium EPSS 4.8% KEV · Not listed
Vendors
Fasterxml Netapp Oracle and 1 more
Products
Jackson-modules-java8 Active Iq Unified Manager Clusterware and 4 more
CVE-2018-1000850

retrofit: Directory traversal in RequestBuilder allows manipulation of resources

Square Retrofit version versions from (including) 2.0 and 2.5.0 (excluding) contains a Directory Traversal vulnerability in RequestBuilder class, method addPathParameter that can result in By manipulating the URL an attacker could add or delete resources otherwise unavailable to her.. This attack appear to be exploitable via An attacker should have access to an encoded path parameter on POST, PUT or DELETE request.. This vulnerability appears to have been fixed in 2.5.0 and later.

CVSS 3.0 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Redhat Squareup
Products
Jboss Fuse Retrofit
CVE-2018-1000632

dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents

dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.

CVSS 3.1 · 7.5 High EPSS 6.6% KEV · Not listed
Vendors
Debian Dom4j Project Netapp and 2 more
Products
Debian Linux Dom4j Oncommand Workflow Automation and 14 more
CVE-2018-1000130

jolokia: JMX proxy mode vulnerable to remote code execution

A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server.

CVSS 3.0 · 8.1 High EPSS 73.7% KEV · Not listed
Vendors
Jolokia Redhat
Products
Webarchive Agent Jboss Fuse
CVE-2018-1000129

jolokia: Cross site scripting in the HTTP servlet

An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.

CVSS 3.0 · 6.1 Medium EPSS 24.7% KEV · Not listed
Vendors
Jolokia Redhat
Products
Jolokia Jboss Amq Jboss Fuse
CVE-2017-8046

spring-boot: Malicious PATCH requests submitted to servers can use specially crafted JSON data to run arbitrary Java code

Malicious PATCH requests submitted to servers using Spring Data REST versions prior to 2.6.9 (Ingalls SR9), versions prior to 3.0.1 (Kay SR1) and Spring Boot versions prior to 1.5.9, 2.0 M6 can use specially crafted JSON data to run arbitrary Java code.

CVSS 3.0 · 9.8 Critical EPSS 74.5% KEV · Not listed
Vendors
Pivotal Software Redhat Vmware
Products
Spring Data Rest Jboss Fuse Spring Boot and 1 more
CVE-2017-7657

jetty: HTTP request smuggling

In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request.

CVSS 3.1 · 9.8 Critical EPSS 14.4% KEV · Not listed
Vendors
Debian Eclipse Hp and 3 more
Products
Debian Linux Jetty Xp P9000 and 17 more
CVE-2017-7559

undertow: HTTP Request smuggling vulnerability (incomplete fix of CVE-2017-2666)

In Undertow 2.x before 2.0.0.Alpha2, 1.4.x before 1.4.17.Final, and 1.3.x before 1.3.31.Final, it was found that the fix for CVE-2017-2666 was incomplete and invalid characters are still allowed in the query string and path parameters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating the HTTP response the attacker could poison a web-cache, perform an XSS attack, or obtain sensitive information from requests other than their own.

CVSS 3.0 · 6.1 Medium EPSS 1.9% KEV · Not listed
Vendors
Redhat
Products
Jboss Amq Jboss Enterprise Application Platform Jboss Fuse and 1 more
CVE-2017-7536

hibernate-validator: Privilege escalation when running under the security manager

In Hibernate Validator 5.2.x before 5.2.5 final, 5.3.x, and 5.4.x, it was found that when the security manager's reflective permissions, which allows it to access the private members of the class, are granted to Hibernate Validator, a potential privilege escalation can occur. By allowing the calling code to access those private members without the permission an attacker may be able to validate an invalid instance and access the private member value via ConstraintViolation#getInvalidValue().

CVSS 3.1 · 7.0 High EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Hibernate Validator Jboss Amq and 6 more
CVE-2017-2594

hawtio: information Disclosure flaws due to unsafe path traversal

hawtio before versions 2.0-beta-1, 2.0-beta-2 2.0-m1, 2.0-m2, 2.0-m3, and 1.5 is vulnerable to a path traversal that leads to a NullPointerException with a full stacktrace. An attacker could use this flaw to gather undisclosed information from within hawtio's root.

CVSS 3.0 · 5.4 Medium EPSS 1.8% KEV · Not listed
Vendors
Hawt Redhat
Products
Hawtio Jboss Amq Jboss Fuse
CVE-2017-2589

hawtio: Proxy is sharing cookies among all the clients

It was discovered that the hawtio servlet 1.4 uses a single HttpClient instance to proxy requests with a persistent cookie store (cookies are stored locally and are not passed between the client and the end URL) which means all clients using that proxy are sharing the same cookies.

CVSS 3.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Hawt Redhat
Products
Hawtio Jboss Amq Jboss Fuse
CVE-2017-15691

uima: XML external entity expansion (XXE) can allow attackers to execute arbitrary code

In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of various XML parsers. UIMA as part of its configuration and operation may read XML from various sources, which could be tainted in ways to cause inadvertent disclosure of local files or other internal content.

CVSS 3.0 · 6.5 Medium EPSS 8.9% KEV · Not listed
Vendors
Apache Redhat
Products
Uima-as Uimaducc Uimafit and 2 more
CVE-2017-15089

infinispan: Unsafe deserialization of malicious object injected into data cache

It was found that the Hotrod client in Infinispan before 9.2.0.CR1 would unsafely read deserialized data on information from the cache. An authenticated attacker could inject a malicious object into the data cache and attain deserialization on the client, and possibly conduct further attacks.

CVSS 3.0 · 8.8 High EPSS 2.8% KEV · Not listed
Vendors
Infinispan Redhat
Products
Infinispan Jboss Data Grid Jboss Enterprise Application Platform and 3 more
CVE-2017-12196

undertow: Client can use bogus uri in Digest authentication

undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not ensure that the value of URI in the Authorization header matches the URI in HTTP request line. This allows the attacker to cause a MITM attack and access the desired content on the server.

CVSS 3.0 · 4.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Jboss Enterprise Application Platform Jboss Enterprise Application Platform Cd and 3 more