eap7-jboss-jsf-api_2.2_spec

Direct Vulnerabilities

Known vulnerabilities in the eap7-jboss-jsf-api_2.2_spec package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H HTTP Request Smuggling	<0:2.2.13-4.redhat_1.1.ep7.el7
H Incorrect Permission Assignment for Critical Resource	<0:2.2.13-4.redhat_1.1.ep7.el7
H HTTP Request Smuggling	<0:2.2.13-4.redhat_1.1.ep7.el7
H Information Exposure	<0:2.2.13-4.redhat_1.1.ep7.el7
H Directory Traversal	<0:2.2.13-5.SP2_redhat_1.1.ep7.el7
H Out-of-Bounds	<0:2.2.13-4.redhat_1.1.ep7.el7
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0:2.2.13-4.redhat_1.1.ep7.el7
H HTTP Request Smuggling	<0:2.2.13-4.redhat_1.1.ep7.el7
H Access Restriction Bypass	<0:2.2.13-4.redhat_1.1.ep7.el7
H Resource Exhaustion	<0:2.2.13-4.redhat_1.1.ep7.el7
H Deserialization of Untrusted Data	<0:2.2.13-4.redhat_1.1.ep7.el7
H Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')	<0:2.2.13-4.redhat_1.1.ep7.el7
H Improper Input Validation	<0:2.2.13-4.redhat_1.1.ep7.el7
H Improper Access Control	<0:2.2.13-4.redhat_1.1.ep7.el7
H Resource Exhaustion	<0:2.2.13-4.redhat_1.1.ep7.el7
H Information Exposure	<0:2.2.13-4.redhat_1.1.ep7.el7
H Directory Traversal	<0:2.2.13-4.redhat_1.1.ep7.el7
H HTTP Response Splitting	<0:2.2.13-4.redhat_1.1.ep7.el7
H HTTP Response Splitting	<0:2.2.13-5.SP2_redhat_1.1.ep7.el7
H Deserialization of Untrusted Data	<0:2.2.13-5.SP2_redhat_1.1.ep7.el7