JM
Product
Jboss Middleware Text-only Advisories
On CISA KEVExploited in the wild
9
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 3Low 0
Watch
Add Jboss Middleware Text-only Advisories to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-4437 In wildKEV | 9.8 | Jun 7 | Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access… Affected: 1.0 |
| CVE-2022-1415 | 8.8 | Sep 11 | A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data Affected: All versions, or not specified |
| CVE-2024-1132 | 8.1 | Apr 17 | A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect Affected: 1.0 |
| CVE-2023-4853 | 8.1 | Sep 20 | A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of… Affected: 1.0 |
| CVE-2019-14439 | 7.5 | Jul 30 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2 Affected: 1.0 |
| CVE-2016-4970 | 7.5 | Apr 13 | handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop) Affected: 1.0 |
| CVE-2019-14900 | 6.5 | Jul 6 | A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1 Affected: All versions, or not specified |
| CVE-2011-2487 | 5.9 | Mar 11 | The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack Affected: All versions, or not specified |
| CVE-2018-1288 | 5.4 | Jul 26 | In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually… Affected: 1.0 |
Showing 9