Redhat Process Automation vulnerabilities, page 2
23 vulnerabilities
Known vulnerabilities in Redhat Process Automation, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-28369debianundertow+12
EPSS score0.89%
A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrectly processes the request by stripping these leading spaces. This behavior, which violates HTTP standards, can be exploited by a remote attacker to perform request smuggling. Request smuggling allows an attacker to bypass security mechanisms, access restricted information, or manipulate web caches, potentially leading to unauthorized actions or data exposure.CVE-2023-1108debianundertow+24EPSS score1.77%
A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.CVE-2023-44487akkahttp_server+704KEVEPSS score100.00%
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.