Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by default

Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller

Openjdk-orb: unauthed class loading via iiop in eap

Undertow-core: undertow: denial of service via websocket permessage-deflate processing

Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener

Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method

Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service

Undertow-core: oom via missing limits in chunked trailer in eap's undertow

Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos

Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery