Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 654

Export CSV
CVE-2017-12165

undertow: improper whitespace parsing leading to potential HTTP request smuggling

It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause possible http request smuggling.

CVSS 3.0 · 2.6 Low EPSS 1.9% KEV · Not listed
Vendors
Redhat
Products
Jboss Amq Jboss Enterprise Application Platform Jboss Fuse and 1 more
CVE-2016-8750

karaf: LDAP injection in LDAPLoginModule

Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP. However, it did not encoding usernames properly and hence was vulnerable to LDAP injection attacks leading to a denial of service.

CVSS 3.0 · 6.5 Medium EPSS 5.2% KEV · Not listed
Vendors
Apache Redhat
Products
Karaf Jboss Amq Jboss Fuse
CVE-2016-8653

Fuse-6: JMX endpoint deserializes untrusted credentials.

It was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the credentials passed to it. An attacker could use this flaw to launch a denial of service attack.

CVSS 3.0 · 5.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Redhat
Products
Jboss A-mq Jboss Fuse
CVE-2016-8648

Karaf JMX Console RCE during deserialization

It was found that the Karaf container used by Red Hat JBoss Fuse 6.x, and Red Hat JBoss A-MQ 6.x, deserializes objects passed to MBeans via JMX operations. An attacker could use this flaw to execute remote code on the server as the user running the Java Virtual Machine if the target MBean contain deserialization gadgets in its classpath.

CVSS 3.0 · 7.2 High EPSS 2.0% KEV · Not listed
Vendors
Redhat
Products
Jboss A-mq Jboss Fuse
CVE-2016-6814

Groovy: Remote code execution via deserialization

When an application with unsupported Codehaus versions of Groovy from 1.7.0 to 2.4.3, Apache Groovy 2.4.4 to 2.4.7 on classpath uses standard Java serialization mechanisms, e.g. to communicate between servers or to store local data, it was possible for an attacker to bake a special serialized object that will execute code directly when deserialized. All applications which rely on serialization and do not isolate the code which deserializes objects were subject to this vulnerability.

CVSS 3.0 · 9.8 Critical EPSS 17.2% KEV · Not listed
Vendors
Apache Redhat
Products
Groovy Enterprise Linux Enterprise Linux Server and 4 more
CVE-2016-5397

thrift: Improper file path sanitization in t_go_generator.cc:format_go_output() of the go client library can allow an attacker to inject commands

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.

CVSS 3.0 · 8.8 High EPSS 6.9% KEV · Not listed
Vendors
Apache Redhat
Products
Thrift Jboss Data Virtualization Jboss Fuse
CVE-2016-10750

hazelcast: java deserialization in join cluster procedure leading to remote code execution

In Hazelcast before 3.11, the cluster join procedure is vulnerable to remote code execution via Java deserialization. If an attacker can reach a listening Hazelcast instance with a crafted JoinRequest, and vulnerable classes exist in the classpath, the attacker can run arbitrary code.

CVSS 3.0 · 8.1 High EPSS 4.0% KEV · Not listed
Vendors
Hazelcast Redhat
Products
Hazelcast Jboss Fuse
CVE-2015-7559

ActiveMQ: DoS in client via shutdown command

It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client.

CVSS 3.1 · 2.7 Low EPSS 2.0% KEV · Not listed
Vendors
Apache Redhat
Products
Activemq Jboss A-mq Jboss Amq and 1 more
CVE-2014-4651

JClouds: predictable tmp file creation in ScriptBuilder Statements

It was found that the jclouds scriptbuilder Statements class wrote a temporary file to a predictable location. An attacker could use this flaw to access sensitive data, cause a denial of service, or perform other attacks.

CVSS 3.1 · 9.8 Critical EPSS 2.1% KEV · Not listed
Vendors
Apache Redhat
Products
Jclouds Jboss Fuse
CVE-2013-6430

Framework: org.spring.web.util.JavaScriptUtils.javaScriptEscape insufficient escaping of characters

The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escape certain characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a (1) line separator or (2) paragraph separator Unicode character or (3) left or (4) right angle bracket.

CVSS 3.1 · 5.4 Medium EPSS 1.8% KEV · Not listed
Vendors
Pivotal Software Redhat
Products
Spring Framework Jboss Amq Jboss Fuse
CVE-2017-16012

js-jquery: XSS in responses from cross-origin ajax requests

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-9251. Reason: This candidate is a duplicate of CVE-2015-9251. Notes: All CVE users should reference CVE-2015-9251 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

CVSS 3.0 · 6.8 Medium EPSS n/a KEV · Not listed
Vendors
Redhat
Products
Jboss Fuse Jboss Single Sign On