Product by Red Hat

Business-central

20 known vulnerabilities in Business-central (Red Hat), 1 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Business-central (Red Hat)

Critical	CVE-2023-44487	HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 158 other products	7.5	10.10.2023
Critical	CVE-2018-19361	FasterXML Jackson-databind: Deserialization of Untrusted Data also in 11 other products	9.8	02.01.2019
Critical	CVE-2018-19362	FasterXML Jackson-databind: Deserialization of Untrusted Data also in 11 other products	9.8	02.01.2019
Critical	CVE-2018-19360	FasterXML Jackson-databind: Deserialization of Untrusted Data also in 11 other products	9.8	02.01.2019
High	CVE-2018-12023	FasterXML Jackson-databind: security vulnerability also in 10 other products	7.5	17.03.2019
High	CVE-2018-12022	FasterXML Jackson-databind: security vulnerability also in 10 other products	7.5	17.03.2019
Critical	CVE-2019-14892	Red Hat Jackson-databind: Deserialization of Untrusted Data also in 8 other products	7.5	02.03.2020
High	CVE-2020-1714	Red Hat Keycloak: Improper Input Validation also in 7 other products	7.5	13.05.2020
Medium	CVE-2017-7545	KIE Jbpm-designer: Improper Restriction of XML External Entity Reference also in 2 other products	6.5	26.07.2018
High	CVE-2023-1108	Undertow: infinite loop in sslconduit during close also in 33 other products	7.5	14.09.2023
High	CVE-2023-4853	Quarkus: http security policy bypass also in 14 other products	8.1	20.09.2023
Medium	CVE-2019-14900	Hibernate: SQL Injection also in 9 other products	6.5	06.07.2020
Medium	CVE-2019-14862	Red Hat Knockout: Cross-site Scripting also in 4 other products	6.1	02.01.2020
High	CVE-2020-1748	Wildfly: Improper Access Control also in 2 other products	7.5	16.09.2020
High	CVE-2022-1415	Drools: unsafe data deserialization in streamutils also in 17 other products	8.1	11.09.2023
High	CVE-2019-14863	Red Hat Angular:: Cross-site Scripting also in 3 other products	7.1	02.01.2020
High	CVE-2019-14841	Business-central: Improper Preservation of Permissions also in 1 other product	8.8	17.10.2022
High	CVE-2019-14840	Business-central: Insufficiently Protected Credentials	7.5	17.10.2022
Medium	CVE-2020-1720	Red Hat Postgresql: Improper Authorization also in 4 other products	3.1	17.03.2020
Medium	CVE-2019-14886	Red Hat Business-central: Cleartext Storage of Sensitive Information also in 2 other products	4.6	05.03.2020

All products by Red Hat

Key figures

Vulnerabilities