redhat / jboss_enterprise_application_platform_text-only_advisories CVEs

Beta · best-effort

3 CVEs tagged to redhat / jboss_enterprise_application_platform_text-only_advisories — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to redhat vendor archive

CVE-2023-3223

Published Sep 27, 2023

A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause rem…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2011-2487

Published Mar 11, 2020

The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.

CVSS 5.9 · Medium

Vendor/product tagsBeta · best-effort

CVE-2020-7238

Published Jan 27, 2020

Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length he…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1