CVE-2023-4066
Published Sep 27, 2023A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are show…
Vendor/product archive
redhat / jboss_middleware CVEs
Beta · best-effort6 CVEs tagged to redhat / jboss_middleware — 0 Critical, 3 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2023-4065
Published Sep 27, 2023A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an a…
CVE-2023-4853
Published Sep 20, 2023A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of…
CVE-2018-1304
Published Feb 28, 2018The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49…
CVE-2017-7957
Published Apr 29, 2017XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a r…
CVE-2016-3674
Published May 17, 2016Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDri…
Showing 1-6 of 6 CVEsPage 1 of 1