IC
Product
Integration Camel K
19
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 13Medium 5Low 1
Watch
Add Integration Camel K to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4853 | 8.1 | Sep 20 | A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of… Affected: before 1.10.2 |
| CVE-2024-7885 | 7.5 | Aug 21 | Undertow: improper state management in proxy protocol parsing causes information leakage Affected: All versions, or not specified |
| CVE-2022-4244 | 7.5 | Sep 25 | A flaw was found in codeplex-codehaus Affected: before 1.10.1 |
| CVE-2023-1108 | 7.5 | Sep 14 | A flaw was found in undertow Affected: All versions, or not specified |
| CVE-2022-4492 | 7.5 | Feb 23 | The undertow client is not checking the server identity presented by the server certificate in https connections Affected: All versions, or not specified |
| CVE-2022-1278 | 7.5 | Sep 13 | A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain Affected: All versions, or not specified |
| CVE-2022-1259 | 7.5 | Aug 31 | A flaw was found in Undertow Affected: All versions, or not specified |
| CVE-2022-0084 | 7.5 | Aug 26 | A flaw was found in XNIO, specifically in the notifyReadClosed method Affected: All versions, or not specified |
| CVE-2021-3690 | 7.5 | Aug 23 | A flaw was found in Undertow Affected: All versions, or not specified |
| CVE-2022-2053 | 7.5 | Aug 5 | When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpServerRequestConduit implementation closes a connection… Affected: All versions, or not specified |
| CVE-2021-4104 | 7.5 | Dec 14 | JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration Affected: All versions, or not specified |
| CVE-2020-14326 | 7.5 | Jun 2 | A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes Affected: All versions, or not specified |
| CVE-2021-20218 | 7.4 | Mar 16 | A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after Affected: All versions, or not specified |
| CVE-2021-4178 | 6.7 | Aug 24 | A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above Affected: All versions, or not specified |
| CVE-2021-3642 | 5.3 | Aug 5 | A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if… Affected: All versions, or not specified |
| CVE-2022-2764 | 4.9 | Sep 1 | A flaw was found in Undertow Affected: All versions, or not specified |
| CVE-2021-3536 | 4.8 | May 20 | A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field,… Affected: All versions, or not specified |
| CVE-2022-4245 | 4.3 | Sep 25 | A flaw was found in codehaus-plexus Affected: before 1.10.1 |
| CVE-2022-41862 | 3.7 | Mar 3 | In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption Affected: All versions, or not specified |
Showing 19