Read the docs
Red Hat Security Advisory

RHSA-2023:0483

Red Hat Fuse 7.11.1.P1 security update

Released 2023-01-26 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 3 records

TI-2022-22907 CVE-2022-46364 · GHSA-x3x3-qwjq-8gj4

Apache CXF SSRF Vulnerability

Priority MEDIUM 53

A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02315 Published 2022-12-13 Partial fix · 3.5.5, 3.4.10 CWE-918
TI-2022-16762 CVE-2022-36437 · GHSA-c5hg-mr8r-f6jp

The Connection handler in Hazelcast and Hazelcast Jet allows a remote unauthenticated…

Priority MEDIUM 49

The Connection handler in Hazelcast and Hazelcast Jet allows a remote unauthenticated attacker to access and manipulate data in the cluster with the identity of another already authenticated connection.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01088 Published 2022-12-29 Partial fix · 3.12.13, 4.1.10 +4 CWE-384
TI-2022-22906 CVE-2022-46363 · GHSA-3w37-5p3p-jv92

Apache CXF directory listing / code exfiltration

Priority MEDIUM 41

A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01261 Published 2022-12-13 Partial fix · 3.5.5, 3.4.10 CWE-20