Product by Red Hat
Red Hat RESTEasy
21 known vulnerabilities in Red Hat RESTEasy (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
21
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2016-9606 | Red Hat RESTEasy: Improper Input Validation | 8.1 | |
| High | CVE-2016-6346 | Red Hat RESTEasy: Denial of Service | 7.5 | |
| High | CVE-2026-89059 | Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos) | 7.5 | |
| High | CVE-2020-1695 | Red Hat RESTEasy: Improper Input Validation | 7.5 | |
| High | CVE-2017-7561 | Red Hat Resteasy: Origin Validation Error | 7.5 | |
| Medium | CVE-2016-6345 | Red Hat RESTEasy: Information Disclosure | 6.5 | |
| Medium | CVE-2016-6347 | Red Hat RESTEasy: Cross-Site Scripting (XSS) | 6.1 | |
| High | CVE-2018-1051 | Red Hat Resteasy: Improper Input Validation | 8.1 | |
| Medium | CVE-2016-6348 | Red Hat RESTEasy: security vulnerability | 6.1 | |
| High | CVE-2020-14326 | RESTEasy: Uncontrolled Resource Consumption | 7.5 | |
| Medium | CVE-2020-10688 | RESTEasy: Cross-site Scripting | 6.1 | |
| Medium | CVE-2021-20289 | Resteasy: Generation of Error Message Containing Sensitive Information | 5.3 | |
| Not rated | CVE-2014-3490 | Red Hat RESTEasy: XML External Entity (XXE) | — | |
| High | CVE-2026-89058 | Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config | 7.4 | |
| Medium | CVE-2020-25633 | Red Hat Resteasy-client: Generation of Error Message Containing Sensitive Information | 5.3 | |
| Not rated | CVE-2012-0818 | Red Hat RESTEasy: XML External Entity (XXE) | — | |
| Not rated | CVE-2011-5245 | Red Hat RESTEasy: XML External Entity (XXE) | — | |
| Medium | CVE-2021-20293 | RESTEasy: Cross-site Scripting | 6.1 | |
| Not rated | CVE-2014-7839 | Red Hat RESTEasy: XML External Entity (XXE) | — | |
| Medium | CVE-2020-25724 | Resteasy: Unsynchronized Access to Shared Data in a Multithreaded Context | 4.3 | |
| Medium | CVE-2023-0482 | RESTEasy: Creation of Temporary File With Insecure Permissions | 5.5 |