Homepage

eap7-undertow-jastow

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the eap7-undertow-jastow package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Excessive Platform Resource Consumption within a Loop

<0:2.0.15-1.Final_redhat_00001.1.el7eap
  • H
Allocation of Resources Without Limits or Throttling

<0:2.0.15-1.Final_redhat_00001.1.el7eap
  • H
Resource Exhaustion

<0:2.0.15-1.Final_redhat_00001.1.el7eap
  • H
Cross-site Scripting (XSS)

<0:2.0.15-1.Final_redhat_00001.1.el7eap
  • H
Integer Coercion Error

<0:2.0.15-1.Final_redhat_00001.1.el7eap
  • H
Improperly Implemented Security Check for Standard

<0:2.0.7-2.Final_redhat_00001.1.el7eap
  • H
Race Condition

<0:2.0.7-2.Final_redhat_00001.1.el7eap
  • H
Resource Exhaustion

<0:2.0.8-1.Final_redhat_00001.1.el7eap
  • H
Information Exposure Through Server Error Message

<0:2.0.14-1.Final_redhat_00001.1.el7eap
  • M
Cleartext Transmission of Sensitive Information

<0:2.0.6-1.Final_redhat_00001.1.ep7.el7
  • H
Directory Traversal

<0:2.0.3-1.Final_redhat_1.1.ep7.el7
  • H
Insufficient Verification of Data Authenticity

<0:2.0.3-1.Final_redhat_1.1.ep7.el7
  • H
HTTP Request Smuggling

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • H
Incorrect Permission Assignment for Critical Resource

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • H
HTTP Request Smuggling

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • H
Information Exposure

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • H
Out-of-Bounds

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • H
HTTP Request Smuggling

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • H
Access Restriction Bypass

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • H
Loop with Unreachable Exit Condition ('Infinite Loop')

<0:2.0.14-1.Final_redhat_00001.1.el7eap
  • H
Cross-site Scripting (XSS)

<0:2.0.8-1.Final_redhat_00001.1.el7eap
  • M
Information Exposure

<0:2.0.7-1.Final_redhat_00001.1.ep7.el7
  • H
Deserialization of Untrusted Data

<0:2.0.3-1.Final_redhat_1.1.ep7.el7
  • H
Improper Authentication

<0:2.0.3-1.Final_redhat_1.1.ep7.el7
  • H
Resource Exhaustion

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • H
Deserialization of Untrusted Data

<0:2.0.3-1.Final_redhat_1.1.ep7.el7
  • H
Deserialization of Untrusted Data

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • H
Information Exposure Through Log Files

<0:2.0.8-1.Final_redhat_00001.1.el7eap
  • H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • M
Cross-site Scripting (XSS)

<0:2.0.7-1.Final_redhat_00001.1.ep7.el7
  • H
Improper Input Validation

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • H
Improper Input Validation

<0:2.0.3-1.Final_redhat_1.1.ep7.el7
  • H
Improper Access Control

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • H
Resource Exhaustion

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • H
Information Exposure

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • H
Directory Traversal

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • H
Deserialization of Untrusted Data

<0:2.0.3-1.Final_redhat_1.1.ep7.el7
  • M
Information Exposure

<0:2.0.6-2.Final_redhat_00001.1.el7eap
  • H
Information Exposure

<0:2.0.14-1.Final_redhat_00001.1.el7eap
  • H
HTTP Request Smuggling

<0:2.0.8-1.Final_redhat_00001.1.el7eap
  • H
Uncontrolled Recursion

<0:2.0.14-1.Final_redhat_00001.1.el7eap
  • H
Incomplete Blacklist

<0:2.0.3-1.Final_redhat_1.1.ep7.el7
  • H
Creation of Temporary File With Insecure Permissions

<0:2.0.14-1.Final_redhat_00001.1.el7eap
  • H
Out-of-bounds Write

<0:2.0.14-1.Final_redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.0.14-1.Final_redhat_00001.1.el7eap
  • H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

<0:2.0.14-1.Final_redhat_00001.1.el7eap
  • H
Out-of-bounds Write

<0:2.0.14-1.Final_redhat_00001.1.el7eap
  • H
HTTP Response Splitting

<0:2.0.2-1.Final_redhat_1.1.ep7.el7
  • H
Cross-site Request Forgery (CSRF)

<0:2.0.7-2.Final_redhat_00001.1.el7eap
  • H
XML External Entity (XXE) Injection

<0:2.0.7-2.Final_redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.0.7-2.Final_redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.0.7-2.Final_redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.0.7-2.Final_redhat_00001.1.el7eap
  • H
Improper Input Validation

<0:2.0.8-1.Final_redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.0.8-1.Final_redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.0.8-1.Final_redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.0.8-1.Final_redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.0.8-1.Final_redhat_00001.1.el7eap
  • M
Arbitrary Argument Injection

<0:2.0.7-1.Final_redhat_00001.1.ep7.el7
  • H
Deserialization of Untrusted Data

<0:2.0.8-1.Final_redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.0.8-1.Final_redhat_00001.1.el7eap
  • H
Deserialization of Untrusted Data

<0:2.0.8-1.Final_redhat_00001.1.el7eap