Integration (Redhat) - vulnerabilities (CVEs)

25 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-01-30. Vendor: Redhat.

CVEs of Integration

CVE-2024-4027 - CVSS 7.5 (high), 2026-01-30: A flaw was found in Undertow. Servlets using a method that calls HttpServletRequestImpl.getParameterNames() can cause an OutOfMemoryError when the client…
CVE-2024-3884 - CVSS 7.5 (high), 2025-12-03: A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDefinition.doParse(StreamSourceChannel)…
CVE-2025-2240 - CVSS 7.5 (high), 2025-03-12: A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory (OOM) issue. This vulnerability is externally triggered when…
CVE-2025-23368 - CVSS 8.1 (high), 2025-03-04: A flaw was found in Wildfly Elytron integration. The component does not implement sufficient measures to prevent multiple failed authentication attempts…
CVE-2024-11831 - CVSS 5.4 (medium), 2025-02-10: A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such…
CVE-2024-12397 - CVSS 7.4 (high), 2024-12-12: A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an…
CVE-2023-4639 - CVSS 7.4 (high), 2024-11-17: A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an…
CVE-2023-1419 - CVSS 5.9 (medium), 2024-11-17: A script injection vulnerability was found in the Debezium database connector, where it does not properly sanitize some parameters. This flaw allows an…
CVE-2024-7885 - CVSS 7.5 (high), 2024-08-21: A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs…
CVE-2024-3653 - CVSS 5.3 (medium), 2024-07-08: A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving…
CVE-2024-5971 - CVSS 7.5 (high), 2024-07-08: A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client…
CVE-2024-6162 - CVSS 7.5 (high), 2024-06-20: A vulnerability was found in Undertow, where URL-encoded request paths can be mishandled during concurrent requests on the AJP listener. This issue arises…
CVE-2023-5675 - CVSS 6.5 (medium), 2024-04-25: A flaw was found in Quarkus. When a Quarkus RestEasy Classic or Reactive JAX-RS endpoint has its methods declared in the abstract Java class or customized by…
CVE-2024-2700 - CVSS 7 (high), 2024-04-04: A vulnerability was found in the quarkus-core component. Quarkus captures local environment variables from the Quarkus namespace during the application's…
CVE-2024-1300 - CVSS 5.4 (medium), 2024-04-02: A vulnerability in the Eclipse Vert.x toolkit causes a memory leak in TCP servers configured with TLS and SNI support. When processing an unknown SNI server…
CVE-2024-1023 - CVSS 6.5 (medium), 2024-03-27: A vulnerability in the Eclipse Vert.x toolkit results in a memory leak due to using Netty FastThreadLocal data structures. Specifically, when the Vert.x HTTP…
CVE-2023-5685 - CVSS 7.5 (high), 2024-03-22: A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can…
CVE-2024-1635 - CVSS 7.5 (high), 2024-02-19: A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and…
CVE-2023-6267 - CVSS 9.8 (critical), 2024-01-25: A flaw was found in the json payload. If annotation based security is used to secure a REST resource, the JSON body that the resource may consume is being…
CVE-2023-3223 - CVSS 7.5 (high), 2023-09-27: A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow…
CVE-2022-4244 - CVSS 7.5 (high), 2023-09-25: A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the…
CVE-2022-4245 - CVSS 4.3 (medium), 2023-09-25: A flaw was found in codehaus-plexus. The org.codehaus.plexus.util.xml.XmlWriterUtil#writeComment fails to sanitize comments for a --> sequence. This issue…
CVE-2023-1108 - CVSS 7.5 (high), 2023-09-14: A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the…
CVE-2022-1415 - CVSS 8.8 (high), 2023-09-11: A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This flaw allows an authenticated attacker…
CVE-2021-3629 - CVSS 5.9 (medium), 2022-05-24: A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of…