org.apache.camel:camel-linkedin (>=2.16.1, <=2.16.2), org.apache.camel:camel-linkedin-api (>=2.16.1, <=2.16.2) +12 more potentially affected by CVE-2026-50629 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.1.4)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel:camel-linkedin =2.16.1, =2.16.1, =10.0.0.alpha2, =10.0.0.beta1...

org.apache.camel:camel-linkedin (>=2.16.1, <=2.16.2), org.apache.camel:camel-linkedin-api (>=2.16.1, <=2.16.2) +12 more potentially affected by CVE-2026-50630 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.1.4)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel:camel-linkedin =2.16.1, =2.16.1, =10.0.0.alpha2, =10.0.0.beta1...

org.apache.camel:camel-linkedin (>=2.16.1, <=2.16.2), org.apache.camel:camel-linkedin-api (>=2.16.1, <=2.16.2) +12 more potentially affected by CVE-2026-50628 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.1.4)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel:camel-linkedin =2.16.1, =2.16.1, =10.0.0.alpha2, =10.0.0.beta1...

EUVD-2012-3398

Malware in sbrugna...

EUVD-2014-0223

Malware in sbrugna...

org.teiid.wildfly:teiid-test-integration (>=12.3.0, <=13.1.2), org.teiid.wildfly:teiid-wildfly-admin (>=12.3.0, <=13.1.2) +86 more potentially affected by CVE-2023-4061 via org.wildfly.core:wildfly-controller (9.0.1.final)

org.wildfly.core:wildfly-controller MAVEN version 9.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.wildfly.core:wildfly-controller and may be impacted: - org.teiid.wildfly:teiid-test-integration =12.3.0, =12.3.0, =13.1.2 -...

CVE-2014-0170

Teiid before 8.4.3 and before 8.7 and Red Hat JBoss Data Virtualization 6.0.0 before patch 3 allows remote attackers to read arbitrary files via a crafted request to a REST endpoint, related to an XML External Entity XXE issue...

Xxe

Teiid before 8.4.3 and before 8.7 and Red Hat JBoss Data Virtualization 6.0.0 before patch 3 allows remote attackers to read arbitrary files via a crafted request to a REST endpoint, related to an XML External Entity XXE issue...

CVE-2014-0170

Teiid before 8.4.3 and before 8.7 and Red Hat JBoss Data Virtualization 6.0.0 before patch 3 allows remote attackers to read arbitrary files via a crafted request to a REST endpoint, related to an XML External Entity XXE issue...

CVE-2014-0170

Teiid before 8.4.3 and before 8.7 and Red Hat JBoss Data Virtualization 6.0.0 before patch 3 are affected by an XML External Entity (XXE) vulnerability. A remote attacker could read arbitrary files via a crafted request to a REST endpoint. The Red Hat advisory RHSA-2014:1284 confirms a fix in Red...

CVE-2014-0170: Undefined Security Weakness

Teiid before 8.4.3 and before 8.7 and Red Hat JBoss Data Virtualization 6.0.0 before patch 3 allows remote attackers to read arbitrary files via a crafted request to a REST endpoint, related to an XML External Entity XXE issue...

PT-2014-3514

Name of the Vulnerable Software and Affected Versions Teiid versions prior to 8.4.3 Teiid versions prior to 8.7 Red Hat JBoss Data Virtualization 6.0.0 before patch 3 Description The issue allows remote attackers to read arbitrary files via a crafted request to a REST endpoint, related to an XML...

Teiid: XML eXternal Entity (XXE) flaw in SQL/XML parsing

It was found that Teiid SQL/XML permitted XML eXternal Entity XXE attacks. If a REST endpoint was deployed, a remote attacker could submit a request containing an external XML entity that, when resolved, allowed that attacker to read files on the application server in the context of the user...

CVE-2012-3431

The Teiid Java Database Connectivity JDBC socket, as used in JBoss Enterprise Data Services Platform before 5.3.0, does not encrypt login messages by default contrary to documentation and specification, which allows remote attackers to obtain login credentials via a man-in-the-middle MITM attack...

Default configuration

The Teiid Java Database Connectivity JDBC socket, as used in JBoss Enterprise Data Services Platform before 5.3.0, does not encrypt login messages by default contrary to documentation and specification, which allows remote attackers to obtain login credentials via a man-in-the-middle MITM attack...

CVE-2012-3431

The Teiid Java Database Connectivity JDBC socket, as used in JBoss Enterprise Data Services Platform before 5.3.0, does not encrypt login messages by default contrary to documentation and specification, which allows remote attackers to obtain login credentials via a man-in-the-middle MITM attack...

CVE-2012-3431

The vulnerability CVE-2012-3431 affects the Teiid JDBC socket used by JBoss Enterprise Data Services Platform before 5.3.0, where login messages were not encrypted by default as documented. This enables a man-in-the-middle attacker to obtain login credentials and related JDBC traffic. Remediation...

CVE-2012-3431: Undefined Security Weakness

The Teiid Java Database Connectivity JDBC socket, as used in JBoss Enterprise Data Services Platform before 5.3.0, does not encrypt login messages by default contrary to documentation and specification, which allows remote attackers to obtain login credentials via a man-in-the-middle MITM attack...

PT-2012-4706

Name of the Vulnerable Software and Affected Versions Teiid Java Database Connectivity JDBC socket versions prior to 5.3.0 Description The issue allows remote attackers to obtain login credentials via a man-in-the-middle MITM attack because login messages are not encrypted by default, contrary to...

Teiid: JDBC socket does not encrypt client login messages by default

The Teiid Java Database Connectivity JDBC socket, as used in JBoss Enterprise Data Services Platform before 5.3.0, does not encrypt login messages by default contrary to documentation and specification, which allows remote attackers to obtain login credentials via a man-in-the-middle MITM attack...