Red Hat Security AdvisoryRHSA-2021:4679
Red Hat JBoss Enterprise Application Platform 7.4.2 security update
Released 2021-11-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Enterprise Application Platform io.undertow.undertow-core-2.2.12.Final-redhat-00001.jar, org.apache.santuario.xmlsec-2.1.7.redhat-00001.jar, org.apache.sshd.sshd-core-2.7.0.redhat-00001.jar +3
Fixes 6 records
Priority MEDIUM 49
All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference e…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.07441 · Published 2021-09-19 · Partial fix · 2.2.3,2.1.7, 2.2.3 +1 CWE-200
Priority MEDIUM 48
jsoup is a Java library for working with HTML.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.06689 · Published 2021-08-18 · Partial fix · 1.14.2 CWE-248
Priority LOW 34
A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03049 · Published 2021-07-12 · Partial fix · 2.7.0 CWE-772
Priority LOW 34
A flaw was found in Wildfly.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00315 · Published 2022-05-24 · Partial fix · 17.0 CWE-552
Priority LOW 29
A flaw was found in Undertow.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01322 · Published 2022-05-24 · Partial fix · 2.0.40.Final, 2.2.11.Final CWE-400
Priority LOW 27
A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.014 · Published 2021-03-26 · Partial fix · 4.6.1, 4.5.10 +1 CWE-209
THREATIST.IORead the docs