DM
Product
Decision Manager
19
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 9Medium 6Low 0
Watch
Add Decision Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-1415 | 8.8 | Sep 11 | A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data Affected: 7.0 |
| CVE-2019-14841 | 8.8 | Oct 17 | A flaw was found in the RHDM, where an authenticated attacker can change their assigned role in the response header Affected: 7.0 |
| CVE-2020-1714 | 8.8 | May 13 | A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks Affected: 7.0 |
| CVE-2023-4853 | 8.1 | Sep 20 | A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of… Affected: 7.0 |
| CVE-2023-1108 | 7.5 | Sep 14 | A flaw was found in undertow Affected: 7.0 |
| CVE-2019-14840 | 7.5 | Oct 17 | A flaw was found in the RHDM, where sensitive HTML form fields like Password has auto-complete enabled which may lead to leak of credentials Affected: 7.0 |
| CVE-2020-1748 | 7.5 | Sep 16 | A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security… Affected: 7.0 |
| CVE-2018-12022 | 7.5 | Mar 17 | An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6 Affected: 7.3.1 |
| CVE-2018-12023 | 7.5 | Mar 17 | An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6 Affected: 7.3.1 |
Showing 9