Jboss Data Virtualization (Redhat) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 13 known versions, newest CVE from 2024-11-07. Vendor: Redhat.

CVEs of Jboss Data Virtualization

• CVE-2023-1932 - CVSS 6.1 (medium), 2024-11-07: A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can…
• CVE-2022-1415 - CVSS 8.8 (high), 2023-09-11: A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This flaw allows an authenticated attacker…
• CVE-2021-4104 - CVSS 7.5 (high), 2021-12-14: JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can…
• CVE-2020-14340 - CVSS 5.9 (medium), 2021-06-02: A vulnerability was discovered in XNIO where file descriptor leak caused by growing amounts of NIO Selector file handles between garbage collection cycles. It…
• CVE-2015-7501 - CVSS 9.8 (critical), 2017-11-09: Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform…
• CVE-2014-0171 - CVSS 5 (medium), 2015-01-15: XML external entity (XXE) vulnerability in StaxXMLFactoryProvider2 in Odata4j, as used in Red Hat JBoss Data Virtualization before 6.0.0 patch 4, allows…
• CVE-2014-0170 - CVSS 4.3 (medium), 2014-09-30: Teiid before 8.4.3 and before 8.7 and Red Hat JBoss Data Virtualization 6.0.0 before patch 3 allows remote attackers to read arbitrary files via a crafted…