com.ibm.research.kar:kar-runtime-quarkus (1.0.9), io.quarkus.resteasy.reactive:resteasy-reactive-processor (1.13.3.final) +11 more potentially affected by CVE-2023-6267 via io.quarkus.resteasy.reactive:resteasy-reactive (1.13.3.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 1.13.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - com.ibm.research.kar:kar-runtime-quarkus 1.0.9 -...

io.quarkus.resteasy.reactive:resteasy-reactive-processor (1.11.0.final), io.quarkus.resteasy.reactive:resteasy-reactive-vertx (1.11.0.final) +10 more potentially affected by CVE-2023-6267 via io.quarkus.resteasy.reactive:resteasy-reactive (1.11.0.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 1.11.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-processor...

CVE-2023-5675

A flaw was found in Quarkus. When a Quarkus RestEasy Classic or Reactive JAX-RS endpoint has its methods declared in the abstract Java class or customized by Quarkus extensions using the annotation processor, the authorization of these methods will not be enforced if it is enabled by either...

Important: Red Hat Security Advisory: Red Hat build of Quarkus 2.13.9.SP1 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more informatio...

Security Bulletin: Multiple Security Vulnerabilities were identified in IBM Security Verify Access (CVE-2023-46158, CVE-2023-0482, CVE-2022-46364, CVE-2023-28867)

Summary Security Vulnerability fixes in IBM WebSphere Application Server Liberty and other components have been addressed in an update to IBM Security Verify Access. Vulnerability Details CVEID:CVE-2023-46158 DESCRIPTION: IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could...

Medium: resteasy-base

Issue Overview: A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's paramete...

Amazon Linux 2 : resteasy-base (ALAS-2024-2398)

The version of resteasy-base installed on the remote host is prior to 3.0.6-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2398 advisory. A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are...

SUSE CVE-2016-7050

SerializableProvider in RESTEasy in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows remote attackers to execute arbitrary code...

Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to privilege escalation due to IBM WebSphere Application Server Liberty (CVE-2023-0482)

Summary IBM WebSphere Application Server Liberty is shipped with IBM Tivoli Netcool Impact as part of its server infrastructure. Information about a security vulnerability affecting IBM WebSphere Application Server Liberty has been published in a security bulletin. Vulnerability Details...

Security Bulletin: IBM Cognos Analytics is affected but not classified as vulnerable to vulnerabilities in IBM Websphere Application Server Liberty

Summary IBM Cognos Analytics is affected but not classified as vulnerable to vulnerabilities in IBM Websphere Application Server Liberty as the vulnerable features are not enabled see References below. IBM Cognos Analytics has upgraded to an non-affected version of IBM Websphere Application Serve...

io.quarkus:quarkus-camel-servlet (0.19.1), io.quarkus:quarkus-camel-servlet-deployment (0.19.1) +38 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (0.19.1)

io.quarkus:quarkus-undertow MAVEN version 0.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-camel-servlet 0.19.1 - io.quarkus:quarkus-camel-servlet-deployment 0.19.1 -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.13.1.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.13.1.final) +2 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.13.1.final)

io.quarkus:quarkus-undertow MAVEN version 1.13.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.13.1.final -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.12.2.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.12.2.final) +3 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.12.2.final)

io.quarkus:quarkus-undertow MAVEN version 1.12.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.12.2.final -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.11.0.beta2), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.11.0.beta2) +3 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.11.0.beta2)

io.quarkus:quarkus-undertow MAVEN version 1.11.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.11.0.beta2 -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.13.6.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.13.6.final) +2 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.13.6.final)

io.quarkus:quarkus-undertow MAVEN version 1.13.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.13.6.final -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.11.0.beta1), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.11.0.beta1) +3 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.11.0.beta1)

io.quarkus:quarkus-undertow MAVEN version 1.11.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.11.0.beta1 -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.11.6.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.11.6.final) +3 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.11.6.final)

io.quarkus:quarkus-undertow MAVEN version 1.11.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.11.6.final -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.13.7.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.13.7.final) +2 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.13.7.final)

io.quarkus:quarkus-undertow MAVEN version 1.13.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.13.7.final -...

io.automatiko.addons:automatiko-events-websocket-addon (0.2.0), io.quarkus:quarkus-resteasy-reactive-servlet (1.12.0.cr1) +4 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.12.0.cr1)

io.quarkus:quarkus-undertow MAVEN version 1.12.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.automatiko.addons:automatiko-events-websocket-addon 0.2.0 -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.13.0.cr1), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.13.0.cr1) +2 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.13.0.cr1)

io.quarkus:quarkus-undertow MAVEN version 1.13.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.13.0.cr1 -...