OA
Product
Openshift Application Runtimes
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 14Medium 14Low 2
Watch
Add Openshift Application Runtimes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1714 | 8.8 | May 13 | A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks Affected: All versions, or not specified |
| CVE-2020-1718 | 8.8 | May 12 | A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0 Affected: All versions, or not specified |
| CVE-2019-10174 | 8.8 | Nov 25 | A vulnerability was found in Infinispan such that the invokeAccessibly method from the public class ReflectionUtil allows any application class to invoke private methods in any… Affected: All versions, or not specified |
| CVE-2020-1757 | 8.1 | Apr 21 | A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet… Affected: All versions, or not specified |
| CVE-2023-1108 | 7.5 | Sep 14 | A flaw was found in undertow Affected: All versions, or not specified |
| CVE-2022-1319 | 7.5 | Aug 31 | A flaw was found in Undertow Affected: All versions, or not specified |
| CVE-2022-1259 | 7.5 | Aug 31 | A flaw was found in Undertow Affected: All versions, or not specified |
| CVE-2021-3690 | 7.5 | Aug 23 | A flaw was found in Undertow Affected: All versions, or not specified |
| CVE-2021-4104 | 7.5 | Dec 14 | JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration Affected: All versions, or not specified |
| CVE-2020-27782 | 7.5 | Feb 23 | A flaw was found in the Undertow AJP connector Affected: All versions, or not specified |
| CVE-2020-25644 | 7.5 | Oct 6 | A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session Affected: All versions, or not specified |
| CVE-2020-10758 | 7.5 | Sep 16 | A vulnerability was found in Keycloak before 11.0.1 where DoS attack is possible by sending twenty requests simultaneously to the specified keycloak server, all with a… Affected: 1.0 |
| CVE-2020-10705 | 7.5 | Jun 10 | A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error Affected: All versions, or not specified |
| CVE-2019-10184 | 7.5 | Jul 25 | undertow before version 2.0.23.Final is vulnerable to an information leak issue Affected: 1.0 |
Showing 14