eap7-glassfish-jsf

Direct Vulnerabilities

Known vulnerabilities in the eap7-glassfish-jsf package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Deserialization of Untrusted Data	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Excessive Platform Resource Consumption within a Loop	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H CVE-2026-15567	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Buffer Overflow	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Allocation of Resources Without Limits or Throttling	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Covert Timing Channel	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Improper Verification of Cryptographic Signature	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Allocation of Resources Without Limits or Throttling	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Improper Verification of Cryptographic Signature	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Improper Validation of Syntactic Correctness of Input	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Missing Release of Resource after Effective Lifetime	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Missing Release of Resource after Effective Lifetime	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Origin Validation Error	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Arbitrary Code Injection	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Allocation of Resources Without Limits or Throttling	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Origin Validation Error	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Allocation of Resources Without Limits or Throttling	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Buffer Access with Incorrect Length Value	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Allocation of Resources Without Limits or Throttling	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Allocation of Resources Without Limits or Throttling	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Improper Validation of Specified Type of Input	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Allocation of Resources Without Limits or Throttling	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H HTTP Request Smuggling	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H HTTP Request Smuggling	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H HTTP Request Smuggling	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Improper Validation of Syntactic Correctness of Input	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H CRLF Injection	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H CRLF Injection	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Allocation of Resources Without Limits or Throttling	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Missing Authentication for Critical Function	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Missing Authentication for Critical Function	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Integer Overflow or Wraparound	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Allocation of Resources Without Limits or Throttling	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Inclusion of Functionality from Untrusted Control Sphere	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Improper Verification of Cryptographic Signature	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Improper Certificate Validation	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Improper Verification of Cryptographic Signature	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H LDAP Injection	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Use of a Broken or Risky Cryptographic Algorithm	<0:2.3.14-11.SP11_redhat_00001.1.el7eap
H Cross-site Scripting (XSS)	<0:2.3.14-9.SP10_redhat_00001.1.el7eap
H Improper Access Control	<0:2.3.14-9.SP10_redhat_00001.1.el7eap
H Arbitrary Code Injection	<0:2.3.14-9.SP10_redhat_00001.1.el7eap
H Cross-site Scripting (XSS)	<0:2.3.14-9.SP10_redhat_00001.1.el7eap
H Resource Exhaustion	<0:2.3.14-9.SP10_redhat_00001.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.14-9.SP10_redhat_00001.1.el7eap
H Cross-site Scripting (XSS)	<0:2.3.14-9.SP10_redhat_00001.1.el7eap
M Link Following	<0:2.3.14-7.SP08_redhat_00001.1.el7eap
M Information Exposure Through Log Files	<0:2.3.14-7.SP08_redhat_00001.1.el7eap
H Cross-site Scripting (XSS)	<0:2.3.9-10.SP09_redhat_00001.1.el7eap
H Improper Input Validation	<0:2.3.5-7.SP3_redhat_00005.1.el7eap
H Resource Exhaustion	<0:2.3.5-6.SP3_redhat_00004.1.el7eap
H Information Exposure Through Log Files	<0:2.3.5-4.SP3_redhat_00002.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.5-4.SP3_redhat_00002.1.el7eap
H Allocation of Resources Without Limits or Throttling	<0:2.3.5-10.SP3_redhat_00008.1.el7eap
H Path Equivalence	<0:2.3.5-10.SP3_redhat_00008.1.el7eap
H Improper Access Control	<0:2.3.5-10.SP3_redhat_00008.1.el7eap
H Incorrect Authorization	<0:2.3.5-10.SP3_redhat_00008.1.el7eap
H Privilege Context Switching Error	<0:2.3.5-10.SP3_redhat_00008.1.el7eap
H Resource Exhaustion	<0:2.3.5-10.SP3_redhat_00008.1.el7eap
H Cross-site Scripting (XSS)	<0:2.3.5-10.SP3_redhat_00008.1.el7eap
H Insufficiently Protected Credentials	<0:2.3.5-10.SP3_redhat_00008.1.el7eap
M Information Exposure	<0:2.3.9-11.SP12_redhat_00001.1.el7eap
M Improper Authentication	<0:2.3.9-11.SP12_redhat_00001.1.el7eap
H Directory Traversal	<0:2.3.9-10.SP09_redhat_00001.1.el7eap
H Improper Authorization	<0:2.3.9-11.SP11_redhat_00001.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.9-11.SP11_redhat_00001.1.el7eap
H Exposed Dangerous Method or Function	<0:2.3.9-11.SP11_redhat_00001.1.el7eap
H Session Fixation	<0:2.3.9-11.SP11_redhat_00001.1.el7eap
H HTTP Request Smuggling	<0:2.3.9-11.SP11_redhat_00001.1.el7eap
H Memory Leak	<0:2.3.9-12.SP13_redhat_00001.1.el7eap
H Memory Leak	<0:2.3.9-12.SP13_redhat_00001.1.el7eap
H Information Exposure	<0:2.3.9-12.SP13_redhat_00001.1.el7eap
H Directory Traversal	<0:2.3.5-11.SP3_redhat_00009.1.el7eap
H Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')	<0:2.3.9-10.SP09_redhat_00001.1.el7eap
M Cleartext Transmission of Sensitive Information	<0:2.2.13-7.SP6_redhat_00001.1.ep7.el7
H Directory Traversal	<0:2.2.13-6.SP5_redhat_1.1.ep7.el7
H Insufficient Verification of Data Authenticity	<0:2.2.13-6.SP5_redhat_1.1.ep7.el7
H HTTP Request Smuggling	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H Incorrect Permission Assignment for Critical Resource	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H HTTP Request Smuggling	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H Information Exposure	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H Out-of-Bounds	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H HTTP Request Smuggling	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H Access Restriction Bypass	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H Resource Exhaustion	<0:2.3.9-12.SP13_redhat_00001.1.el7eap
H Improper Authorization	<0:2.3.5-10.SP3_redhat_00008.1.el7eap
H Improper Input Validation	<0:2.3.9-11.SP11_redhat_00001.1.el7eap
H Cross-site Scripting (XSS)	<0:2.3.5-6.SP3_redhat_00004.1.el7eap
H XML External Entity (XXE) Injection	<0:2.3.5-10.SP3_redhat_00008.1.el7eap
H Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')	<0:2.3.5-11.SP3_redhat_00009.1.el7eap
H SQL Injection	<0:2.3.9-11.SP11_redhat_00001.1.el7eap
H Deserialization of Untrusted Data	<0:2.2.13-6.SP5_redhat_1.1.ep7.el7
H Improper Authentication	<0:2.2.13-6.SP5_redhat_1.1.ep7.el7
H Resource Exhaustion	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H Out-of-bounds Read	<0:2.3.9-10.SP09_redhat_00001.1.el7eap
H Deserialization of Untrusted Data	<0:2.2.13-6.SP5_redhat_1.1.ep7.el7
H Deserialization of Untrusted Data	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H Information Exposure Through Log Files	<0:2.3.5-6.SP3_redhat_00004.1.el7eap
H Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H Improper Input Validation	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H Improper Input Validation	<0:2.2.13-6.SP5_redhat_1.1.ep7.el7
H Improper Access Control	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H Resource Exhaustion	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H Information Exposure	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H Directory Traversal	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H Missing Authorization	<0:2.3.5-4.SP3_redhat_00002.1.el7eap
H Authentication Bypass	<0:2.3.5-5.SP3_redhat_00003.1.el7eap
H Improper Access Control	<0:2.3.5-5.SP3_redhat_00003.1.el7eap
H Improper Validation of Syntactic Correctness of Input	<0:2.3.9-11.SP11_redhat_00001.1.el7eap
H Deserialization of Untrusted Data	<0:2.2.13-6.SP5_redhat_1.1.ep7.el7
H Resource Exhaustion	<0:2.3.9-10.SP09_redhat_00001.1.el7eap
M Information Exposure	<0:2.3.5-2.SP2_redhat_00001.1.el7eap
M Improper Input Validation	<0:2.3.9-11.SP12_redhat_00001.1.el7eap
H HTTP Request Smuggling	<0:2.3.5-7.SP3_redhat_00005.1.el7eap
H HTTP Request Smuggling	<0:2.3.5-7.SP3_redhat_00005.1.el7eap
H HTTP Request Smuggling	<0:2.3.5-7.SP3_redhat_00005.1.el7eap
H HTTP Request Smuggling	<0:2.3.5-6.SP3_redhat_00004.1.el7eap
H HTTP Request Smuggling	<0:2.3.5-10.SP3_redhat_00008.1.el7eap
H Improper Resource Shutdown or Release	<0:2.3.9-11.SP11_redhat_00001.1.el7eap
H Resource Exhaustion	<0:2.3.9-11.SP11_redhat_00001.1.el7eap
H Allocation of Resources Without Limits or Throttling	<0:2.3.9-11.SP11_redhat_00001.1.el7eap
M Resource Exhaustion	<0:2.3.9-11.SP12_redhat_00001.1.el7eap
H Incomplete Blacklist	<0:2.2.13-6.SP5_redhat_1.1.ep7.el7
H HTTP Response Splitting	<0:2.2.13-5.SP4_redhat_1.1.ep7.el7
H Improper Input Validation	<0:2.3.5-6.SP3_redhat_00004.1.el7eap
H Static Code Injection	<0:2.3.9-11.SP11_redhat_00001.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.5-6.SP3_redhat_00004.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.5-6.SP3_redhat_00004.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.5-6.SP3_redhat_00004.1.el7eap
H Static Code Injection	<0:2.3.9-11.SP11_redhat_00001.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.5-6.SP3_redhat_00004.1.el7eap
H Improper Input Validation	<0:2.3.9-10.SP09_redhat_00001.1.el7eap
H XML External Entity (XXE) Injection	<0:2.3.9-11.SP11_redhat_00001.1.el7eap
H Resource Exhaustion	<0:2.3.5-5.SP3_redhat_00003.1.el7eap
H Resource Exhaustion	<0:2.3.5-5.SP3_redhat_00003.1.el7eap
H Resource Exhaustion	<0:2.3.5-5.SP3_redhat_00003.1.el7eap
H Resource Exhaustion	<0:2.3.5-5.SP3_redhat_00003.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.5-4.SP3_redhat_00002.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.5-4.SP3_redhat_00002.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.5-4.SP3_redhat_00002.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.9-10.SP09_redhat_00001.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.9-10.SP09_redhat_00001.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.9-10.SP09_redhat_00001.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.9-10.SP09_redhat_00001.1.el7eap
H Information Exposure	<0:2.3.9-12.SP13_redhat_00001.1.el7eap
H Improper Input Validation	<0:2.3.9-12.SP13_redhat_00001.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.5-6.SP3_redhat_00004.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.5-6.SP3_redhat_00004.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.5-6.SP3_redhat_00004.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.5-4.SP3_redhat_00002.1.el7eap
H Deserialization of Untrusted Data	<0:2.3.5-7.SP3_redhat_00005.1.el7eap

Vulnerability

Vulnerable Version

Deserialization of Untrusted Data