Product by Red Hat
Red Hat Jboss Enterprise Application Platform 6
12 known vulnerabilities in Red Hat Jboss Enterprise Application Platform 6 (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-1132 | Keycloak: path transversal in redirection validation | 8.1 | |
| High | CVE-2022-4244 | Codehaus-plexus: directory traversal | 7.5 | |
| High | CVE-2023-4639 | Undertow: cookie smuggling/spoofing | 7.4 | |
| High | CVE-2022-1415 | Drools: unsafe data deserialization in streamutils | 8.1 | |
| High | CVE-2023-6291 | Keycloak: redirect_uri validation bypass | 7.1 | |
| Medium | CVE-2024-1102 | Jberet: jberet-core logging database credentials | 6.5 | |
| Medium | CVE-2023-3628 | Infispan: rest bulk ops don't check permissions | 6.5 | |
| Medium | CVE-2023-6717 | Keycloak: xss via assertion consumer service url in saml post-binding flow | 6.0 | |
| High | CVE-2024-1249 | Keycloak: Origin Validation Error | 7.4 | |
| Medium | CVE-2023-1932 | Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss | 6.1 | |
| Medium | CVE-2023-3629 | Infinispan: non-admins should not be able to get cache config via rest api | 4.3 | |
| Medium | CVE-2022-4245 | Codehaus-plexus: xml external entity (xxe) injection | 4.3 |