Jboss Fuse Security Vulnerabilities and Issues — Jboss Fuse CVE List

Lucene search

RedhatJboss Fuse

4 matches found

CVE•added 2020/04/21 5:15 p.m.•162 views

CVE-2020-1757

A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final, where the Servlet container causes servletPath to normalize incorrectly by truncating the path after semicolon which may lead to an applica...

8.1CVSS7.7AI score0.0015EPSS

CVE•added 2020/05/13 7:15 p.m.•143 views

CVE-2020-1714

A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks. This flaw allows an attacker to inject arbitrarily serialized Java Objects, which would then get deserialized in a privileged context and potentially lead to remote code...

8.8CVSS8.5AI score0.01876EPSS

CVE•added 2020/05/12 9:15 p.m.•128 views

CVE-2020-1718

A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gain unauthorized access to the application.

8.8CVSS8.4AI score0.00367EPSS

CVE•added 2017/12/29 10:29 p.m.•42 views

CVE-2014-0120

Cross-site request forgery (CSRF) vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running "shutdown -f."

8.8CVSS9.1AI score0.00145EPSS