JM
Product
Jboss Middleware
6
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 3Low 0
Watch
Add Jboss Middleware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4853 | 8.1 | Sep 20 | A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of… Affected: 1 |
| CVE-2017-7957 | 7.5 | Apr 29 | XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a… Affected: 1 |
| CVE-2016-3674 | 7.5 | May 17 | Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7)… Affected: 1 |
| CVE-2018-1304 | 5.9 | Feb 28 | The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49… Affected: 1 |
| CVE-2023-4066 | 5.5 | Sep 27 | A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are… Affected: 1 |
| CVE-2023-4065 | 5.5 | Sep 27 | A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log Affected: 1 |
Showing 6