Integration Service Registry (Redhat) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-10-10. Vendor: Redhat.

CVEs of Integration Service Registry

• CVE-2023-44487 - CVSS 7.5 (high), 2023-10-10: The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the…
• CVE-2023-4853 - CVSS 8.1 (high), 2023-09-20: A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in…
• CVE-2023-1108 - CVSS 7.5 (high), 2023-09-14: A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the…
• CVE-2022-41862 - CVSS 3.7 (low), 2023-03-03: In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain…
• CVE-2022-4492 - CVSS 7.5 (high), 2023-02-23: The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it…
• CVE-2022-1278 - CVSS 7.5 (high), 2022-09-13: A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.
• CVE-2021-3536 - CVSS 4.8 (medium), 2021-05-20: A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in…