eap7-log4j-jboss-logmanager vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the eap7-log4j-jboss-logmanager package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Information Exposure	<0:1.3.1-2.Final_redhat_00003.1.el9eap
H Uncontrolled Recursion	<0:1.3.1-1.Final_redhat_00002.1.el9eap
H Memory Leak	<0:1.3.1-1.Final_redhat_00002.1.el9eap
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:1.3.1-1.Final_redhat_00002.1.el9eap
H Information Exposure	<0:1.3.1-1.Final_redhat_00002.1.el9eap
H Improper Input Validation	<0:1.3.1-1.Final_redhat_00002.1.el9eap
H Allocation of Resources Without Limits or Throttling	<0:1.3.1-1.Final_redhat_00002.1.el9eap
H Resource Exhaustion	<0:1.3.1-1.Final_redhat_00002.1.el9eap
M Deserialization of Untrusted Data	<0:1.2.2-1.Final_redhat_00002.1.el9eap
M Creation of Temporary File With Insecure Permissions	<0:1.2.2-1.Final_redhat_00002.1.el9eap
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<0:1.2.2-1.Final_redhat_00002.1.el9eap