Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update

Fixed packages 47

Vulnerabilities 19

• Medium 6.9
  CVE-2020-11023 Exploited Public exploit EPSS 85%

  Potential XSS vulnerability in jQuery

  In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute unt…

  jquery jQuery drupal7 cacti Debian Ubuntu Alpine npm Packagist Maven NuGet RubyGems
  Apr 29, 2020

  KEV Jan 23, 2025
• Critical 9.8
  CVE-2022-45047 Public exploit

  Apache MINA SSHD: Java unsafe deserialization vulnerability

  Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSH…

  Apache Software Foundation Apache MINA SSHD org.apache.sshd:sshd-core org.apache.sshd:sshd-common Maven
  Nov 16, 2022
• Critical 9.8
  CVE-2022-46364 Public exploit

  Apache CXF SSRF Vulnerability

  A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. 

  Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven
  Dec 13, 2022
• High 7.5
  CVE-2017-18214

  Regular Expression Denial of Service in moment

  The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.

  reaper ntopng node-moment moment Debian Ubuntu Azure Linux npm
  Mar 4, 2018
• High 7.5
  CVE-2022-42003

  Uncontrolled Resource Consumption in Jackson-databind

  In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled.

  management-api-for-apache-cassandra-5.0 com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Wolfi Maven
  Oct 2, 2022
• High 7.5
  CVE-2022-42004

  Uncontrolled Resource Consumption in FasterXML jackson-databind

  In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for des…

  management-api-for-apache-cassandra-5.0 com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Wolfi Maven
  Oct 2, 2022
• High 7.5
  CVE-2022-45693

  Jettison Out-of-bounds Write vulnerability

  Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

  druid libjettison-java libjettison-java org.codehaus.jettison:jettison Debian Ubuntu Wolfi Maven
  Dec 13, 2022
• High 7.4
  CVE-2022-3143

  Wildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator

  wildfly-elytron: possible timing attacks via use of unsafe comparator. A flaw was found in Wildfly-elytron. Wildfly-elytron uses java.util.Arrays.equals in several places, which is unsafe and vulnerable to timing attacks. To compare values securely, use java.…

  redhat.com Wildfly-elytron org.wildfly.security:wildfly-elytron Maven
  Jan 11, 2023
• Medium 6.9
  CVE-2020-11022 Public exploit EPSS 99%

  jQuery has a potential XSS vulnerability

  In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3…

  jquery jQuery keycloak-26.6-iamguarded-compat drupal7 Debian Ubuntu Alpine Wolfi npm Packagist Maven NuGet RubyGems
  Apr 29, 2020
• Medium 6.5
  CVE-2022-40149

  Stack Buffer Overflow in Jettison

  Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may su…

  Jettison Jettison druid libjettison-java Debian Ubuntu Wolfi Maven
  Sep 16, 2022
• Medium 6.5
  CVE-2022-40150

  Stack Buffer Overflow in Jettison

  Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by Out of memory. This effect may su…

  Jettison Jettison druid libjettison-java Debian Ubuntu Wolfi Maven
  Sep 16, 2022
• Medium 6.5
  CVE-2022-40152 EPSS 18%

  Stack Buffer Overflow in Woodstox

  Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effec…

  x-stream Woodstox libxstream-java sonarqube-10 Debian Ubuntu Wolfi Maven
  Sep 16, 2022
• Medium 6.1
  CVE-2015-9251 Public exploit EPSS 30%

  Cross-Site Scripting (XSS) in jquery

  jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

  ruby ceph jquery-rails org.webjars.npm:jquery Ubuntu Azure Linux Alpine npm Maven NuGet RubyGems
  Jan 18, 2018
• Medium 6.1
  CVE-2016-10735 Public exploit

  Bootstrap Cross-site Scripting vulnerability

  In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

  bootstrap twitter-bootstrap3 twitter-bootstrap3 twbs/bootstrap Debian Ubuntu npm Packagist Maven NuGet RubyGems
  Jan 9, 2019
• Medium 6.1
  CVE-2018-14040 Public exploit

  Bootstrap vulnerable to Cross-Site Scripting (XSS)

  In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

  reaper bootstrap twitter-bootstrap3 twitter-bootstrap3 Debian Ubuntu Azure Linux npm Packagist Maven NuGet RubyGems
  Jul 13, 2018
• Medium 6.1
  CVE-2018-14041 Public exploit

  Bootstrap Cross-site Scripting vulnerability

  In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.

  typo3/cms typo3/cms-core bootstrap twbs/bootstrap npm Packagist Maven NuGet RubyGems
  Jul 13, 2018
• Medium 6.1
  CVE-2018-14042 Public exploit

  Bootstrap Cross-site Scripting vulnerability

  In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

  ceph fluent-bit pytorch twitter-bootstrap3 Debian Ubuntu Azure Linux npm Packagist Maven NuGet RubyGems
  Jul 13, 2018
• Medium 6.1
  CVE-2019-11358 Public exploit EPSS 87%

  XSS in jQuery as used in Drupal, Backdrop CMS, and other products

  jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Obj…

  mediawiki mediawiki django drupal/core Debian Ubuntu Azure Linux Alpine npm Packagist Maven PyPI NuGet RubyGems
  Apr 19, 2019
• Medium 6.1
  CVE-2019-8331 Public exploit EPSS 16%

  Bootstrap Vulnerable to Cross-Site Scripting

  In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

  ceph fluent-bit pytorch ntopng Debian Ubuntu Azure Linux npm Packagist Maven NuGet RubyGems
  Feb 20, 2019

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/
• article
  https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1399546
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1553413
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1601614
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1601616
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1601617
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1668097
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1686454
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1701972
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1828406
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1850004
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2124682
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2134291
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2135244
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2135247
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2135770
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2135771
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2145194
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2155682
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2155970
• article
  https://issues.redhat.com/browse/JBEAP-23864
• article
  https://issues.redhat.com/browse/JBEAP-23865
• article
  https://issues.redhat.com/browse/JBEAP-23866
• article
  https://issues.redhat.com/browse/JBEAP-23927
• article
  https://issues.redhat.com/browse/JBEAP-24055
• article
  https://issues.redhat.com/browse/JBEAP-24081
• article
  https://issues.redhat.com/browse/JBEAP-24095
• article
  https://issues.redhat.com/browse/JBEAP-24100
• article
  https://issues.redhat.com/browse/JBEAP-24127
• article
  https://issues.redhat.com/browse/JBEAP-24128
• article
  https://issues.redhat.com/browse/JBEAP-24132
• article
  https://issues.redhat.com/browse/JBEAP-24147
• article
  https://issues.redhat.com/browse/JBEAP-24167
• article
  https://issues.redhat.com/browse/JBEAP-24191
• article
  https://issues.redhat.com/browse/JBEAP-24195
• article
  https://issues.redhat.com/browse/JBEAP-24207
• article
  https://issues.redhat.com/browse/JBEAP-24248