Integration Camel K vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

IC

Product

Integration Camel K

by Redhat · last CVE Aug 21, 2024

19

CVEs

0

On KEV

8.1

Max CVSS

0

New 30D

Vulnerabilities19 In the news0 Timeline

Severity mix

Critical 0High 13Medium 5Low 1

Severity

All severities19 Critical0 High13 Medium5 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Integration Camel K to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-4853	8.1	1%	Sep 20	A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of… Affected: before 1.10.2
CVE-2024-7885	7.5	3%	Aug 21	Undertow: improper state management in proxy protocol parsing causes information leakage Affected: All versions, or not specified
CVE-2022-4244	7.5	1%	Sep 25	A flaw was found in codeplex-codehaus Affected: before 1.10.1
CVE-2023-1108	7.5	2%	Sep 14	A flaw was found in undertow Affected: All versions, or not specified
CVE-2022-4492	7.5	1%	Feb 23	The undertow client is not checking the server identity presented by the server certificate in https connections Affected: All versions, or not specified
CVE-2022-1278	7.5	1%	Sep 13	A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain Affected: All versions, or not specified
CVE-2022-1259	7.5	1%	Aug 31	A flaw was found in Undertow Affected: All versions, or not specified
CVE-2022-0084	7.5	2%	Aug 26	A flaw was found in XNIO, specifically in the notifyReadClosed method Affected: All versions, or not specified
CVE-2021-3690	7.5	2%	Aug 23	A flaw was found in Undertow Affected: All versions, or not specified
CVE-2022-2053	7.5	1%	Aug 5	When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's AjpServerRequestConduit implementation closes a connection… Affected: All versions, or not specified
CVE-2021-4104	7.5	81%	Dec 14	JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration Affected: All versions, or not specified
CVE-2020-14326	7.5	1%	Jun 2	A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes Affected: All versions, or not specified
CVE-2021-20218	7.4	1%	Mar 16	A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after Affected: All versions, or not specified