Red Hat Security AdvisoryRHSA-2021:5149
Red Hat JBoss Enterprise Application Platform 7.3.10 security update on RHEL 6
Released 2021-12-15 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss EAP 7.3 for RHEL 6 Server eap7-apache-cxf-3.3.12-1.redhat_00001.1.el6eap, eap7-apache-cxf-rt-3.3.12-1.redhat_00001.1.el6eap, eap7-apache-cxf-services-3.3.12-1.redhat_00001.1.el6eap +47
Fixes 6 records
Priority MEDIUM 49
All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference e…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.07441 · Published 2021-09-19 · Partial fix · 2.2.3,2.1.7, 2.2.3 +1 CWE-200
Priority MEDIUM 48
jsoup is a Java library for working with HTML.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.06689 · Published 2021-08-18 · Partial fix · 1.14.2 CWE-248
Priority LOW 34
A flaw was found in Wildfly.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00315 · Published 2022-05-24 · Partial fix · 17.0 CWE-552
Priority LOW 29
A flaw was found in Undertow.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01322 · Published 2022-05-24 · Partial fix · 2.0.40.Final, 2.2.11.Final CWE-400
Priority LOW 27
A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.014 · Published 2021-03-26 · Partial fix · 4.6.1, 4.5.10 +1 CWE-209
Priority LOW 26
A flaw was found in Wildfly Elytron in versions prior to 1.10.14.Final, prior to 1.15.5.Final and prior to 1.16.1.Final where ScramServer may be susceptible to Timing Attack if enabled.
CVSS 3.1MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00846 · Published 2021-08-05 · Partial fix · 1.10.14, 1.15.5 +1 CWE-203
THREATIST.IORead the docs