Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 212

Export CSV
CVE-2020-14299

picketbox: JBoss EAP reload to admin-only mode allows authentication bypass

A flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy SecurityRealm, to delegate to a legacy PicketBox SecurityDomain, and then reloaded to admin-only mode. This flaw allows an attacker to perform a complete authentication bypass by using an arbitrary user and password. The highest threat to vulnerability is to system availability.

CVSS 3.1 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Redhat
Products
Jboss Enterprise Application Platform Jboss Single Sign On Openshift Application Runtimes and 1 more
CVE-2020-14297

wildfly: Some EJB transaction objects may get accumulated causing Denial of Service

A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventaully unavailable. An attacker can take advantage and cause denial of service attack and make services unavailable.

CVSS 3.1 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Redhat
Products
A Mq Clients Amq Jboss-ejb-client and 6 more
CVE-2020-11612

netty: compression/decompression codecs don't enforce limits on buffer allocation sizes

The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.

CVSS 3.1 · 7.5 High EPSS 9.2% KEV · Not listed
Vendors
Debian Fedoraproject Netapp and 3 more
Products
Debian Linux Fedora Oncommand Api Services and 23 more
CVE-2020-10758

keycloak: DoS by sending multiple simultaneous requests with a Content-Length header value greater than actual byte count of request body

A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests simultaneously to the specified keycloak server, all with a Content-Length header value that exceeds the actual byte count of the request body.

CVSS 3.1 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
Redhat
Products
Jboss Single Sign On Keycloak Openshift Application Runtimes and 2 more
CVE-2020-10740

wildfly: unsafe deserialization in Wildfly Enterprise Java Beans

A vulnerability was found in Wildfly in versions before 20.0.0.Final, where a remote deserialization attack is possible in the Enterprise Application Beans(EJB) due to lack of validation/filtering capabilities in wildfly.

CVSS 3.1 · 6.6 Medium EPSS 2.1% KEV · Not listed
Vendors
Redhat
Products
Jboss Enterprise Application Platform Jboss Enterprise Application Platform Cd Jboss Enterprise Application Platform Eus and 4 more
CVE-2020-10734

keycloak: OIDC logout endpoint CSRF

A vulnerability was found in keycloak in the way that the OIDC logout endpoint does not have CSRF protection. Versions shipped with Red Hat Fuse 7, Red Hat Single Sign-on 7, and Red Hat Openshift Application Runtimes are believed to be vulnerable.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Jboss Fuse Keycloak Openshift Application Runtimes and 1 more
CVE-2020-10718

wildfly: exposed setting of TCCL via the EmbeddedManagedProcess API

A flaw was found in Wildfly before wildfly-embedded-13.0.0.Final, where the embedded managed process API has an exposed setting of the Thread Context Classloader (TCCL). This setting is exposed as a public method, which can bypass the security manager. The highest threat from this vulnerability is to confidentiality.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Redhat
Products
Jboss Enterprise Application Platform Jboss Fuse Jboss Single Sign On and 2 more
CVE-2020-10714

wildfly-elytron: session fixation when using FORM authentication

A flaw was found in WildFly Elytron version 1.11.3.Final and before. When using WildFly Elytron FORM authentication with a session ID in the URL, an attacker could perform a session fixation attack. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Netapp Redhat
Products
Oncommand Insight Codeready Studio Descision Manager and 10 more
CVE-2020-10705

undertow: Memory exhaustion issue in HttpReadListener via "Expect: 100-continue" header

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Netapp Redhat
Products
Oncommand Insight Enterprise Linux Jboss Enterprise Application Platform and 3 more
CVE-2020-10693

hibernate-validator: Improper input validation in the interpolation of constraint error messages

A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation (escaping, stripping) controls that developers may have put in place when handling user-controlled data in error messages.

CVSS 3.1 · 5.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Ibm Oracle Quarkus and 1 more
Products
Websphere Application Server Weblogic Server Quarkus and 10 more
CVE-2020-10688

RESTEasy: RESTEASY003870 exception in RESTEasy can lead to a reflected XSS attack

A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final, where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS attack.

CVSS 3.1 · 6.1 Medium EPSS 1.4% KEV · Not listed
Vendors
Redhat
Products
Enterprise Linux Fuse Jboss Enterprise Application Platform and 4 more
CVE-2019-9512

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.

CVSS 3.1 · 7.5 High EPSS 83.4% KEV · Not listed
Vendors
Apache Apple Canonical and 3 more
Products
Traffic Server Mac Os X Swiftnio and 21 more
CVE-2019-3888

undertow: leak credentials to log files UndertowLogger.REQUEST_LOGGER.undertowRequestFailed

A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because Connectors.executeRootHandler:402 logs the HttpServerExchange object at ERROR level using UndertowLogger.REQUEST_LOGGER.undertowRequestFailed(t, exchange)

CVSS 3.1 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Netapp Redhat
Products
Active Iq Unified Manager Enterprise Linux Jboss Data Grid and 7 more
CVE-2019-3875

keycloak: missing signatures validation on CRL used to verify client certificates

A vulnerability was found in keycloak before 6.0.2. The X.509 authenticator supports the verification of client certificates through the CRL, where the CRL list can be obtained from the URL provided in the certificate itself (CDP) or through the separately configured path. The CRL are often available over the network through unsecured protocols ('http' or 'ldap') and hence the caller should verify the signature and possibly the certification path. Keycloak currently doesn't validate signatures on CRL, which can result in a possibility of various attacks like man-in-the-middle.

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Jboss Single Sign On Keycloak Openshift Application Runtimes and 1 more
CVE-2019-3868

keycloak: session hijack using the user access token

Keycloak up to version 6.0.0 allows the end user token (access or id token JWT) to be used as the session cookie for browser sessions for OIDC. As a result an attacker with access to service provider backend could hijack user’s browser session.

CVSS 3.0 · 3.8 Low EPSS 1.0% KEV · Not listed
Vendors
Redhat
Products
Jboss Single Sign On Keycloak Openshift Application Runtimes and 1 more
CVE-2019-17573

cxf: reflected XSS in the services listing page

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack, which allows a malicious actor to inject javascript into the web page. Please note that the attack exploits a feature which is not typically not present in modern browsers, who remove dot segments before sending the request. However, Mobile applications may be vulnerable.

CVSS 3.1 · 6.1 Medium EPSS 7.1% KEV · Not listed
Vendors
Apache Oracle Redhat
Products
Cxf Commerce Guided Search Communications Element Manager and 11 more
CVE-2019-14900

hibernate: SQL injection issue in Hibernate ORM

A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Hibernate Quarkus Redhat
Products
Hibernate Orm Quarkus Build Of Quarkus and 14 more
CVE-2019-14888

undertow: possible Denial Of Service (DOS) in Undertow HTTP server listening on HTTPS

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Netapp Redhat
Products
Active Iq Unified Manager Jboss Data Grid Jboss Enterprise Application Platform and 7 more