Read the docs
Red Hat Security Advisory

RHSA-2020:0729

Red Hat Data Grid 7.3.5 security update

Released 2020-03-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 5 records

TI-2019-11096 CVE-2019-14892 · GHSA-cf6r-3wgc-h863

Information disclosure in Red Hat jackson-databind

Priority MEDIUM 57

A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05576 Published 2020-03-02 Partial fix · 2.9.10, 2.8.11.5 +1 CWE-200
TI-2019-11097 CVE-2019-14893 · GHSA-qmqc-x3r4-6v39

Information disclosure in Red Hat jackson-databind

Priority MEDIUM 56

A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction wi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04091 Published 2020-03-02 Partial fix · 2.9.10 CWE-200
TI-2015-07630 CVE-2015-9251 · GHSA-rmxg-73gg-4p98

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a…

Priority MEDIUM 51

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.29726 Published 2018-01-18 Partial fix · 1.12.2, 3.0.0 +1 CWE-79
TI-2019-11092 CVE-2019-14888 · GHSA-vjxc-frw4-jmh5

Uncontrolled resource consumption in Red Hat undertow

Priority LOW 37

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02179 Published 2020-01-23 Partial fix · 2.0.28.SP1, 2.0.29.Final CWE-400