Redhat Jboss Enterprise Application Platform Text Only Advisories vulnerabilities

3 vulnerabilities

Known vulnerabilities in Redhat Jboss Enterprise Application Platform Text Only Advisories, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

PrioritiseCVE-2023-3223redhat · jboss_enterprise_application_platform +9 more3y agoUndertow: outofmemoryerror due to @multipartconfig handlingA flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null.CVSS7.5HighEPSS2.66%RoutineCVE-2011-2487red hat · jbossws +12 more6y agored hat jbosswsThe implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.CVSS5.9MediumEPSS1.76%PrioritiseCVE-2020-7238debian · debian_linux +9 more6y agodebian debian_linuxNetty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869.CVSS7.5HighEPSS3.65%