Red Hat Security AdvisoryRHSA-2021:3516
EAP XP 2 security update to CVE fixes in the EAP 7.3.x base
Released 2021-09-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat EAP-XP 2.0.0 via EAP 7.3.x base
Fixes 5 records
Priority MEDIUM 48
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files…
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.10549 · Published 2021-04-13 · Partial fix · 2.7 CWE-20
Priority LOW 36
A flaw was found in Undertow.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01774 · Published 2022-08-23 · Partial fix · 2.0.40, 2.2.10 CWE-400
Priority LOW 29
A flaw was found in undertow.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01161 · Published 2022-05-24 · Partial fix · 2.2.9.Final, 2.0.39.Final CWE-362
Priority LOW 28
In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02132 · Published 2021-05-26 · Partial fix · 3.0.4 CWE-20
Priority LOW 18
A flaw was found in wildfly-core in all versions.
CVSS 3.1LOW 3.3· Network · High privileges · No interaction · EPSS 0.00982 · Published 2022-08-26 · Partial fix · 16.0.1.Final, 17.0.0.Beta3 CWE-200
