Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 14

Export CSV
CVE-2024-1132

Keycloak: path transversal in redirection validation

A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. This issue could allow an attacker to construct a malicious request to bypass validation and access other URLs and sensitive information within the domain or conduct further attacks. This flaw affects any client that utilizes a wildcard in the Valid Redirect URIs field, and requires user interaction within the malicious URL.

CVSS 3.1 · 8.1 High EPSS 1.6% KEV · Not listed
Vendors
Redhat
Products
Amq Broker Build Keycloak Build Of Keycloak and 20 more
CVE-2023-4853

Quarkus: http security policy bypass

A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.

CVSS 3.1 · 8.1 High EPSS 2.3% KEV · Not listed
Vendors
Quarkus Redhat
Products
Quarkus Apache Camel Quarkus Build Of Optaplanner and 20 more
CVE-2018-1304

tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources

The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constraint definition. This caused the constraint to be ignored. It was, therefore, possible for unauthorised users to gain access to web application resources that should have been protected. Only security constraints with a URL pattern of the empty string were affected.

CVSS 3.0 · 5.9 Medium EPSS 17.1% KEV · Not listed
Vendors
Apache Canonical Debian and 2 more
Products
Tomcat Ubuntu Linux Debian Linux and 10 more
CVE-2019-14439

jackson-databind: Polymorphic typing issue related to logback/JNDI

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.

CVSS 3.1 · 7.5 High EPSS 10.8% KEV · Not listed
Vendors
Apache Debian Fasterxml and 3 more
Products
Drill Debian Linux Jackson-databind and 17 more
CVE-2017-7957

XStream: DoS when unmarshalling void type

XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("<void/>") call.

CVSS 3.1 · 7.5 High EPSS 4.9% KEV · Not listed
Vendors
Debian Redhat Xstream
Products
Debian Linux Fuse Jboss Amq and 5 more
CVE-2016-3674

XStream: enabled processing of external entities

Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStream before 1.4.9 allow remote attackers to read arbitrary files via a crafted XML document.

CVSS 3.1 · 7.5 High EPSS 8.2% KEV · Not listed
Vendors
Debian Fedoraproject Redhat and 1 more
Products
Debian Linux Fedora Jboss Bpms and 3 more
CVE-2016-4437

shiro: Security constraint bypass

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.

CVSS 3.1 · 9.8 Critical EPSS 93.0% KEV · Listed
Vendors
Apache Redhat
Products
Aurora Shiro Fuse and 3 more
CVE-2023-4065

Operator: plaintext password in operator log

A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of their permissions.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Amq Broker Enterprise Linux Jboss A-mq and 3 more
CVE-2023-4066

Operator: passwords defined in secrets shown in statefulset yaml

A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are shown in plaintext in the StatefulSet details yaml of AMQ Broker.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat
Products
Amq Broker Enterprise Linux Jboss A-mq and 3 more
CVE-2016-4970

netty: Infinite loop vulnerability when handling renegotiation using SslProvider.OpenSsl

handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).

CVSS 3.1 · 7.5 High EPSS 11.3% KEV · Not listed
Vendors
Apache Netty Redhat
Products
Cassandra Netty Jboss Amq and 3 more
CVE-2022-1415

Drools: unsafe data deserialization in streamutils

A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This flaw allows an authenticated attacker to construct malicious serialized objects (usually called gadgets) and achieve code execution on the server.

CVSS 3.1 · 8.1 High EPSS 1.0% KEV · Not listed
Vendors
Redhat
Products
Camel Quarkus Camel Spring Boot Decision Manager and 13 more
CVE-2019-14900

hibernate: SQL injection issue in Hibernate ORM

A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Hibernate Quarkus Redhat
Products
Hibernate Orm Quarkus Build Of Quarkus and 14 more
CVE-2018-1288

kafka: Users can perform Broker actions via crafted fetch requests, interfering with data replication and causing data lass

In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss.

CVSS 3.1 · 5.4 Medium EPSS 4.8% KEV · Not listed
Vendors
Apache Oracle Redhat
Products
Kafka Database Primavera P6 Enterprise Project Portfolio Management and 3 more
CVE-2011-2487

jbossws: Prone to Bleichenbacher attack against to be distributed symmetric key

The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

CVSS 3.1 · 5.9 Medium EPSS 1.8% KEV · Not listed
Vendors
Apache Redhat
Products
Cxf Wss4j Jboss Business Rules Management System and 9 more