JM
Product
Jboss Middleware Text-only Advisories
On CISA KEVExploited in the wild
9
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 3Low 0
Watch
Add Jboss Middleware Text-only Advisories to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-1415 | 8.8 | Sep 11 | A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data Affected: All versions, or not specified |
| CVE-2024-1132 | 8.1 | Apr 17 | A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect Affected: 1.0 |
| CVE-2023-4853 | 8.1 | Sep 20 | A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of… Affected: 1.0 |
| CVE-2019-14439 | 7.5 | Jul 30 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2 Affected: 1.0 |
| CVE-2016-4970 | 7.5 | Apr 13 | handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop) Affected: 1.0 |
Showing 5