Read the docs
Red Hat Security Advisory

RHSA-2023:7678

Red Hat AMQ Streams 2.6.0 release and security update

Released 2023-12-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 11 records

TI-2022-23117 CVE-2022-46751 · GHSA-2jc4-r94c-rp7h

Apache Ivy: XML External Entity vulnerability in Apache Ivy

Priority MEDIUM 46

Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy prior to 2.5.2.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.01999 Published 2023-08-21 Partial fix · 2.5.2 CWE-611
TI-2023-04667 CVE-2023-5072 · GHSA-4jq9-2xhw-jpx7

DoS Vulnerability in JSON-Java

Priority MEDIUM 42

Denial of Service in JSON-Java versions up to and including 20230618.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01741 Published 2023-10-12 Partial fix · 20231013 CWE-770
TI-2023-21704 CVE-2023-41080 · GHSA-q3mw-pvr8-9ggc

Apache Tomcat: Open redirect with FORM authentication

Priority LOW 37

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.06459 Published 2023-08-25 Partial fix · 11.0.0-M11, 10.1.13 +2 CWE-601
TI-2023-02788 CVE-2023-2976 · GHSA-7g45-4rm6-3mm3

Use of temporary directory for file creation in `FileBackedOutputStream` in Guava

Priority LOW 33

Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00248 Published 2023-06-14 Partial fix · 32.0.0, 32.0.0-android CWE-552