Advisories · Technology
Red Hat Process Automation 7.
Every CVE that names Red Hat Process Automation 7 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.9 Medium
Org.wildfly.security/wildfly-elytron-asn1: unbounded memory allocation in wildfly elytron asn.1 derdecoder via crafted der payload
- Red Hat JBoss Enterprise Application Platform 8.1.8.GA
- Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10
- Denial of service
- CVSS 7.5 High
Undertow-core: undertow: denial of service via websocket permessage-deflate processing
- Red Hat JBoss Enterprise Application Platform 8.1.8.GA
- Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10
- Denial of service
- CVSS 6.5 Medium
Wildfly-core: wildfly: arbitrary file read via malicious archive deployment
- Red Hat Fuse 7
- Red Hat JBoss Enterprise Application Platform 7
- Unrestricted file upload
- CVSS 4.9 Medium
Wildfly-core: wildfly core: denial of service via malformed payload injection by an authenticated administrative user.
- Red Hat Fuse 7
- Red Hat JBoss Enterprise Application Platform 7
- Other injection
- CVSS 6.4 Medium
Rhpam: privilege escalation via excessive /etc/passwd permissions
- Red Hat Process Automation 7
- Broken access control
- CVSS 7.5 High
Undertow: ajp request closes connection exceeding maxrequestsize
- Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
- Denial of service