JF
Product
Jboss Fuse
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 16Medium 10Low 3
Watch
Add Jboss Fuse to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-25689 | 6.5 | Nov 2 | A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly… Affected: 7.0.0 |
| CVE-2020-14307 | 6.5 | Jul 24 | A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where SessionOpenInvocations are never removed from the remote… Affected: 6.0.0 |
| CVE-2020-14297 | 6.5 | Jul 24 | A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause… Affected: 6.0.0 |
| CVE-2016-1000229 | 6.1 | Dec 20 | swagger-ui has XSS in key names Affected: 6.3 |
| CVE-2020-14340 | 5.9 | Jun 2 | A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles Affected: 6.0.0; 7.0.0 |
| CVE-2017-12196 | 5.9 | Apr 18 | undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not ensure that the value of URI in the… Affected: 6.0.0 |
| CVE-2021-3642 | 5.3 | Aug 5 | A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if… Affected: 7.0.0 |
| CVE-2016-8653 | 5.3 | Aug 1 | It was found that the JMX endpoint of Red Hat JBoss Fuse 6, and Red Hat A-MQ 6 deserializes the credentials passed to it Affected: 6.0.0 |
| CVE-2022-2764 | 4.9 | Sep 1 | A flaw was found in Undertow Affected: 7.0.0 |
| CVE-2019-14820 | 4.3 | Jan 8 | It was found that keycloak before version 8.0.0 exposes internal adapter endpoints in org.keycloak.constants.AdapterConstants, which can be invoked via a specially-crafted URL Affected: 7.0.0 |
Showing 10