Product by Red Hat
Red Hat Build Of Apache Camel - Hawtio 4
21 known vulnerabilities in Red Hat Build Of Apache Camel - Hawtio 4 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
21
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2023-5685 | Xnio: stackoverflowexception when the chain of notifier states becomes problematically big | 7.5 | |
| High | CVE-2025-9784 | Undertow: undertow madeyoureset http/2 ddos vulnerability | 7.5 | |
| High | CVE-2024-5971 | Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket | 7.5 | |
| High | CVE-2024-7885 | Undertow: improper state management in proxy protocol parsing causes information leakage | 7.5 | |
| Critical | CVE-2025-12543 | Red Hat build of Apache Camel 4.14.4 for Spring Boot 3.5.11: Improper Input Validation | 9.6 | |
| High | CVE-2026-5680 | Undertow-core: undertow: denial of service via websocket permessage-deflate processing | 7.5 | |
| High | CVE-2024-3884 | Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded | 7.5 | |
| High | CVE-2024-6162 | Undertow: url-encoded request path information can be broken on ajp-listener | 7.5 | |
| Critical | CVE-2026-28368 | Undertow: undertow: request smuggling via inconsistent header parsing | 9.1 | |
| Critical | CVE-2026-78234 | Red Hat build of Apache Camel - HawtIO 4: Improper Certificate Validation | 9.9 | |
| Critical | CVE-2026-28367 | Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator | 9.1 | |
| Critical | CVE-2026-28369 | Undertow: undertow: request smuggling via malformed http request headers | 9.1 | |
| Medium | CVE-2024-3653 | Undertow: learningpushhandler can lead to remote memory dos attacks | 5.3 | |
| Medium | CVE-2026-14180 | Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap | 5.3 | |
| Medium | CVE-2026-10832 | Red Hat JBoss Enterprise Application Platform 8.1.8.GA: Allocation of Resources Without Limits or Throttling | 5.9 | |
| High | CVE-2026-77968 | Hawtio-operator: hawtio-operator: cluster-wide secrets read/write granted to operator serviceaccount | 8.2 | |
| Medium | CVE-2026-81303 | Hawtio-operator: hawtio-operator: routes/custom-host confused-deputy via spec.routehostname | 6.3 | |
| High | CVE-2026-80219 | Red Hat build of Apache Camel - HawtIO 4: Weak Authentication | 8.7 | |
| Medium | CVE-2024-11831 | Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript | 5.4 | |
| Medium | CVE-2026-81320 | Hawtio-operator: hawtio-operator: tls private key written to operator log at debug level | 5.5 | |
| High | CVE-2024-2700 | Quarkus-core: leak of local configuration properties into quarkus applications | 7.0 |