[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fC2lpYhKub2UVk4LjjiQFwAbTd65_UsZorJLVNmnL-aU":3,"g5a-family:redhat\u002Fintegration_service_registry":87,"g5a-ex:redhat\u002Fintegration_service_registry@*":88},{"success":4,"data":5},true,{"product":6,"versions":15,"topVulnerabilitiesByEpss":16,"kevVulnerabilities":60,"seoMetadata":65,"meta":84},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":14},"redhat","integration_service_registry",0,7,1,"2023-10-10",[],"Integration Service Registry by Redhat is a technology product and 7 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[17,24,30,36,41,48,53],{"cveId":18,"description":19,"publishedDate":12,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":4,"epssScore":23},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.",7.5,"v3.1","High",0.99999,{"cveId":25,"description":26,"publishedDate":27,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":28,"epssScore":29},"CVE-2023-1108","A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.","2023-09-14",false,0.01771,{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":21,"severity":22,"isKev":28,"epssScore":35},"CVE-2023-4853","A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.","2023-09-20",8.1,0.01449,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":28,"epssScore":40},"CVE-2022-1278","A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.","2022-09-13",0.00861,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":21,"severity":46,"isKev":28,"epssScore":47},"CVE-2022-41862","In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.","2023-03-03",3.7,"Low",0.00622,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":28,"epssScore":52},"CVE-2022-4492","The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http\u002F2. I would add it to any TLS client protocol.","2023-02-23",0.00596,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":21,"severity":58,"isKev":28,"epssScore":59},"CVE-2021-3536","A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality and Integrity.","2021-05-20",4.8,"Medium",0.00533,[61],{"cveId":18,"description":19,"publishedDate":12,"cvssScore":20,"severity":22,"isKev":4,"epssScore":23,"cisaVulnName":62,"cisaDateAdded":12,"cisaShortDescription":63,"cisaRequiredAction":64},"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":66,"metaDescription":67,"keywords":68,"structuredData":69},"Integration Service Registry by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Integration Service Registry by Redhat with 7 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Integration Service Registry vulnerabilities, Integration Service Registry security, Integration Service Registry CVE, Redhat Integration Service Registry, Integration Service Registry threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Integration Service Registry KEV, Integration Service Registry exploited vulnerabilities",{"@context":70,"@type":71,"name":72,"description":67,"url":73,"manufacturer":74,"applicationCategory":78,"softwareVersion":79,"mainEntity":80},"https:\u002F\u002Fschema.org","SoftwareApplication","Integration Service Registry","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fintegration_service_registry",{"@type":75,"name":76,"url":77},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","Multiple versions",{"@type":81,"name":82,"description":83,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Integration Service Registry Security Vulnerabilities","Security vulnerabilities affecting Integration Service Registry by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":85,"apiVersion":86},"2026-10-17T14:43:22.257Z","3.0",[],{"rows":89,"total":11,"capped":28,"failed":9},[90],{"cveId":18,"name":62,"severity":22,"cvss":20,"added":12,"epss":23,"published":91,"ranges":92,"checked":4,"hits":93,"covers":28},"2023-10-10T14:15:10.883",[],[]]