TI-2018-08058 CVE-2018-11307 · GHSA-qr7j-h6gg-jmgc
An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5.
Priority MEDIUM 57
An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5.
RHSA-2019:1140
Red Hat Single Sign-On 7.3.1 security update
Released 2019-05-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Single Sign-On 7.3.1 zip
Fixes 9 records
TI-2018-10573 CVE-2018-14721 · GHSA-9mxf-g3x6-wv74
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct…
Priority MEDIUM 56
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.
TI-2018-10572 CVE-2018-14720 · GHSA-x2w5-5m2g-7h5m
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML…
Priority MEDIUM 52
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.
TI-2018-08616 CVE-2018-12022 · GHSA-cjjf-94ff-43w7
An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and…
Priority MEDIUM 45
An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6.
TI-2018-08617 CVE-2018-12023 · GHSA-6wqp-v4v6-c87c
An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and…
Priority MEDIUM 44
An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6.
TI-2019-02903 CVE-2019-3894 · GHSA-7hpw-qq87-9462
It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in…
Priority MEDIUM 41
It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from 11 to 16 stores a SecurityIdentity to run the thread as.
TI-2018-10505 CVE-2018-14642 · GHSA-vf6r-mmhc-3xcm
Information disclosure in Red Hat undertow
Priority LOW 28
An information leak vulnerability was found in Undertow.
TI-2019-02817 CVE-2019-3805 · GHSA-p2vr-qm33-hrfc
Improper privilege management in Red Hat wildfly
Priority LOW 21
A flaw was discovered in wildfly versions up to 16.0.0.Final that would allow local users who are able to execute init.d script to terminate arbitrary processes on the system.
TI-2019-02878 CVE-2019-3868 · GHSA-gc52-xj6p-9pxp
Information disclosure in Red Hat keycloak
Priority LOW 20
Keycloak up to version 6.0.0 allows the end user token (access or id token JWT) to be used as the session cookie for browser sessions for OIDC.