Jboss Middleware (Redhat) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-09-27. Vendor: Redhat.

CVEs of Jboss Middleware

• CVE-2023-4066 - CVSS 5.5 (medium), 2023-09-27: A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR;…
• CVE-2023-4065 - CVSS 5.5 (medium), 2023-09-27: A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log.…
• CVE-2023-4853 - CVSS 8.1 (high), 2023-09-20: A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in…
• CVE-2018-1304 - CVSS 5.9 (medium), 2018-02-28: The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27,…
• CVE-2017-7957 - CVSS 7.5 (high), 2017-04-29: XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during…
• CVE-2016-3674 - CVSS 7.5 (high), 2016-05-17: Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6)…