Advisories · Technology
Red Hat Exploit Intelligence.
Every CVE that names Red Hat Exploit Intelligence among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.7 High
Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw
- Red Hat Exploit Intelligence
- Red Hat OpenShift Serverless
- Broken access control
- CVSS 3.3 Low
Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers
- Red Hat Confidential Compute Attestation
- Red Hat DPU kit for NVIDIA
- Denial of service
- CVSS 9.1 CriticalCritical · CVSS 9+
Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations
- Red Hat build of Quarkus 3.27.6.redhat
- Red Hat build of Quarkus 3.33.4.redhat
- Broken access control
- CVSS 6.5 Medium
Quarkus-hibernate-orm-rest-data-panache: quarkus-hibernate-orm-rest-data-panache: information disclosure and dos via unvalidated sort parameter in rest data panache
- Red Hat build of Quarkus 3.27.6.redhat
- Red Hat build of Quarkus 3.33.4.redhat
- CWE-20
- CVSS 7.5 High
Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of service
- Red Hat Build of Apache Camel 3.33.4.redhat
- Red Hat build of Quarkus 3.27.6.redhat
- Denial of service
- CVSS 6.1 Medium
Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus
- Red Hat build of Quarkus 3.27.6.redhat
- Red Hat build of Quarkus 3.33.4.redhat
- Cross-site scripting (XSS)
- CVSS 7.5 High
Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security
- Red Hat build of Quarkus 3.27.5.SP2
- Red Hat build of Quarkus 3.33.3.SP2
- CWE-551
- CVSS 7.5 High
Quarkus-websockets-next: denial of service (oom) in quarkus-websockets-next via unbounded message buffering
- Red Hat build of Quarkus 3.27.5.SP2
- Red Hat build of Quarkus 3.33.3.SP2
- Denial of service
- CVSS 5.3 Medium
Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unauthenticated same-origin ssrf via unsanitized jwt kid header in awsalbkeyresolver
- Red Hat build of Quarkus 3.27.5.SP2
- Red Hat build of Quarkus 3.33.3.SP2
- Path traversal