Homepage

eap7-glassfish-jsf

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the eap7-glassfish-jsf package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Deserialization of Untrusted Data

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Allocation of Resources Without Limits or Throttling

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Covert Timing Channel

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Improper Verification of Cryptographic Signature

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Excessive Platform Resource Consumption within a Loop

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Allocation of Resources Without Limits or Throttling

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Improper Verification of Cryptographic Signature

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Improper Validation of Syntactic Correctness of Input

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Missing Release of Resource after Effective Lifetime

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Missing Release of Resource after Effective Lifetime

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Origin Validation Error

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Arbitrary Code Injection

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Allocation of Resources Without Limits or Throttling

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Origin Validation Error

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Allocation of Resources Without Limits or Throttling

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Buffer Access with Incorrect Length Value

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Allocation of Resources Without Limits or Throttling

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Allocation of Resources Without Limits or Throttling

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Improper Validation of Specified Type of Input

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Allocation of Resources Without Limits or Throttling

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
HTTP Request Smuggling

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
HTTP Request Smuggling

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
HTTP Request Smuggling

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Improper Validation of Syntactic Correctness of Input

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
CRLF Injection

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
CRLF Injection

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Allocation of Resources Without Limits or Throttling

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Missing Authentication for Critical Function

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
CVE-2026-15567

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Buffer Overflow

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Missing Authentication for Critical Function

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Integer Overflow or Wraparound

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Allocation of Resources Without Limits or Throttling

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Improper Verification of Cryptographic Signature

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Improper Certificate Validation

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Improper Verification of Cryptographic Signature

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
LDAP Injection

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Use of a Broken or Risky Cryptographic Algorithm

<0:2.3.14-11.SP11_redhat_00001.1.el8eap
  • H
Cross-site Scripting (XSS)

<0:2.3.14-9.SP10_redhat_00001.1.el8eap
  • H
Improper Access Control

<0:2.3.14-9.SP10_redhat_00001.1.el8eap
  • H
Arbitrary Code Injection

<0:2.3.14-9.SP10_redhat_00001.1.el8eap
  • H
Cross-site Scripting (XSS)

<0:2.3.14-9.SP10_redhat_00001.1.el8eap
  • H
Resource Exhaustion

<0:2.3.14-9.SP10_redhat_00001.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.14-9.SP10_redhat_00001.1.el8eap
  • H
Cross-site Scripting (XSS)

<0:2.3.14-9.SP10_redhat_00001.1.el8eap
  • M
Link Following

<0:2.3.14-7.SP08_redhat_00001.1.el8eap
  • M
Information Exposure Through Log Files

<0:2.3.14-7.SP08_redhat_00001.1.el8eap
  • H
Cross-site Scripting (XSS)

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Improper Input Validation

<0:2.3.5-7.SP3_redhat_00005.1.el8eap
  • H
Resource Exhaustion

<0:2.3.5-6.SP3_redhat_00004.1.el8eap
  • H
Information Exposure Through Log Files

<0:2.3.5-4.SP3_redhat_00002.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.5-4.SP3_redhat_00002.1.el8eap
  • H
Allocation of Resources Without Limits or Throttling

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Path Equivalence

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Improper Access Control

<0:2.3.5-10.SP3_redhat_00008.1.el8eap
  • H
Incorrect Authorization

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Privilege Context Switching Error

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Resource Exhaustion

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Cross-site Scripting (XSS)

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Insufficiently Protected Credentials

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • M
Information Exposure

<0:2.3.9-11.SP12_redhat_00001.1.el8eap
  • M
Improper Authentication

<0:2.3.9-11.SP12_redhat_00001.1.el8eap
  • H
Directory Traversal

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Improper Authorization

<0:2.3.5-13.SP3_redhat_00011.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.5-13.SP3_redhat_00011.1.el8eap
  • H
Exposed Dangerous Method or Function

<0:2.3.5-13.SP3_redhat_00011.1.el8eap
  • H
Session Fixation

<0:2.3.5-13.SP3_redhat_00011.1.el8eap
  • H
HTTP Request Smuggling

<0:2.3.5-13.SP3_redhat_00011.1.el8eap
  • H
Memory Leak

<0:2.3.9-12.SP13_redhat_00001.1.el8eap
  • H
Memory Leak

<0:2.3.9-12.SP13_redhat_00001.1.el8eap
  • H
Information Exposure

<0:2.3.9-12.SP13_redhat_00001.1.el8eap
  • H
Directory Traversal

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Resource Exhaustion

<0:2.3.9-12.SP13_redhat_00001.1.el8eap
  • H
Improper Authorization

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Improper Input Validation

<0:2.3.5-13.SP3_redhat_00011.1.el8eap
  • H
Cross-site Scripting (XSS)

<0:2.3.5-6.SP3_redhat_00004.1.el8eap
  • H
XML External Entity (XXE) Injection

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

<0:2.3.5-11.SP3_redhat_00009.1.el8eap
  • H
SQL Injection

<0:2.3.5-13.SP3_redhat_00011.1.el8eap
  • H
Out-of-bounds Read

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Information Exposure Through Log Files

<0:2.3.5-6.SP3_redhat_00004.1.el8eap
  • H
Missing Authorization

<0:2.3.5-4.SP3_redhat_00002.1.el8eap
  • H
Authentication Bypass

<0:2.3.5-5.SP3_redhat_00003.1.el8eap
  • H
Improper Access Control

<0:2.3.5-5.SP3_redhat_00003.1.el8eap
  • H
Improper Validation of Syntactic Correctness of Input

<0:2.3.5-13.SP3_redhat_00011.1.el8eap
  • H
Resource Exhaustion

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • M
Improper Input Validation

<0:2.3.9-11.SP12_redhat_00001.1.el8eap
  • H
HTTP Request Smuggling

<0:2.3.5-7.SP3_redhat_00005.1.el8eap
  • H
HTTP Request Smuggling

<0:2.3.5-7.SP3_redhat_00005.1.el8eap
  • H
HTTP Request Smuggling

<0:2.3.5-7.SP3_redhat_00005.1.el8eap
  • H
HTTP Request Smuggling

<0:2.3.5-6.SP3_redhat_00004.1.el8eap
  • H
HTTP Request Smuggling

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Improper Resource Shutdown or Release

<0:2.3.5-13.SP3_redhat_00011.1.el8eap
  • H
Resource Exhaustion

<0:2.3.5-13.SP3_redhat_00011.1.el8eap
  • H
Allocation of Resources Without Limits or Throttling

<0:2.3.9-11.SP11_redhat_00001.1.el8eap
  • M
Resource Exhaustion

<0:2.3.9-11.SP12_redhat_00001.1.el8eap
  • H
Improper Input Validation

<0:2.3.5-6.SP3_redhat_00004.1.el8eap
  • H
Static Code Injection

<0:2.3.5-13.SP3_redhat_00011.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.5-6.SP3_redhat_00004.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.5-6.SP3_redhat_00004.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.5-6.SP3_redhat_00004.1.el8eap
  • H
Static Code Injection

<0:2.3.5-13.SP3_redhat_00011.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.5-6.SP3_redhat_00004.1.el8eap
  • H
Improper Input Validation

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
XML External Entity (XXE) Injection

<0:2.3.5-13.SP3_redhat_00011.1.el8eap
  • H
Resource Exhaustion

<0:2.3.5-5.SP3_redhat_00003.1.el8eap
  • H
Resource Exhaustion

<0:2.3.5-5.SP3_redhat_00003.1.el8eap
  • H
Resource Exhaustion

<0:2.3.5-5.SP3_redhat_00003.1.el8eap
  • H
Resource Exhaustion

<0:2.3.5-5.SP3_redhat_00003.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.5-4.SP3_redhat_00002.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.5-4.SP3_redhat_00002.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.5-4.SP3_redhat_00002.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.9-10.SP09_redhat_00001.1.el8eap
  • H
Information Exposure

<0:2.3.9-12.SP13_redhat_00001.1.el8eap
  • H
Improper Input Validation

<0:2.3.9-12.SP13_redhat_00001.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.5-6.SP3_redhat_00004.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.5-6.SP3_redhat_00004.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.5-6.SP3_redhat_00004.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.5-4.SP3_redhat_00002.1.el8eap
  • H
Deserialization of Untrusted Data

<0:2.3.5-7.SP3_redhat_00005.1.el8eap