[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fA9zBxcGnLVEnIXz65SEOzTJSDvtwlOrnz9iQMy1LmPE":3,"g5a-family:redhat\u002Fjboss_middleware_text-only_advisories":99,"g5a-ex:redhat\u002Fjboss_middleware_text-only_advisories@*":100},{"success":4,"data":5},true,{"product":6,"versions":17,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":71,"seoMetadata":77,"meta":96},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":16},"redhat","jboss_middleware_text-only_advisories",1,8,"2023-09-20",[13],{"version":14,"cve_count":15,"kev_count":9,"has_kev":4},"1.0",5,"Jboss Middleware Text-only Advisories by Redhat is a technology product with 1 tracked version and 8 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[18],{"version":14,"cve_count":15,"kev_count":9,"has_kev":4},[20,28,36,41,48,54,60,65],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":4,"epssScore":27},"CVE-2016-4437","Apache Shiro before 1.2.5, when a cipher key has not been configured for the \"remember me\" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.","2016-06-07",9.8,"v3.1","Critical",0.93039,{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":25,"severity":33,"isKev":34,"epssScore":35},"CVE-2016-4970","handler\u002Fssl\u002FOpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).","2017-04-13",7.5,"High",false,0.11259,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":32,"cvssVersion":25,"severity":33,"isKev":34,"epssScore":40},"CVE-2019-14439","A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.","2019-07-30",0.10763,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":25,"severity":46,"isKev":34,"epssScore":47},"CVE-2018-1288","In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss.","2018-07-26",5.4,"Medium",0.04801,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":25,"severity":46,"isKev":34,"epssScore":53},"CVE-2019-14900","A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks.","2020-07-06",6.5,0.02126,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":25,"severity":46,"isKev":34,"epssScore":59},"CVE-2011-2487","The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.","2020-03-11",5.9,0.01756,{"cveId":61,"description":62,"publishedDate":11,"cvssScore":63,"cvssVersion":25,"severity":33,"isKev":34,"epssScore":64},"CVE-2023-4853","A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.",8.1,0.01449,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":25,"severity":33,"isKev":34,"epssScore":70},"CVE-2022-1415","A flaw was found where some utility classes in Drools core did not use proper safeguards when deserializing data. This flaw allows an authenticated attacker to construct malicious serialized objects (usually called gadgets) and achieve code execution on the server.","2023-09-11",8.8,0.01044,[72],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"severity":26,"isKev":4,"epssScore":27,"cisaVulnName":73,"cisaDateAdded":74,"cisaShortDescription":75,"cisaRequiredAction":76},"Apache Shiro Code Execution Vulnerability","2021-11-03","Apache Shiro contains a vulnerability which may allow remote attackers to execute code or bypass intended access restrictions via an unspecified request parameter when a cipher key has not been configured for the \"remember me\" feature.","Apply updates per vendor instructions.",{"title":78,"metaDescription":79,"keywords":80,"structuredData":81},"Jboss Middleware Text-only Advisories by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Jboss Middleware Text-only Advisories by Redhat covering 1 version with 8 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Jboss Middleware Text-only Advisories vulnerabilities, Jboss Middleware Text-only Advisories security, Jboss Middleware Text-only Advisories CVE, Redhat Jboss Middleware Text-only Advisories, Jboss Middleware Text-only Advisories threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Jboss Middleware Text-only Advisories KEV, Jboss Middleware Text-only Advisories exploited vulnerabilities",{"@context":82,"@type":83,"name":84,"description":79,"url":85,"manufacturer":86,"applicationCategory":90,"softwareVersion":91,"mainEntity":92},"https:\u002F\u002Fschema.org","SoftwareApplication","Jboss Middleware Text-only Advisories","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fjboss_middleware_text-only_advisories",{"@type":87,"name":88,"url":89},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","1 versions tracked",{"@type":93,"name":94,"description":95,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Jboss Middleware Text-only Advisories Security Vulnerabilities","Security vulnerabilities affecting Jboss Middleware Text-only Advisories by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":97,"apiVersion":98},"2026-10-17T14:25:33.457Z","3.0",[],{"rows":101,"total":9,"capped":34,"failed":106},[102],{"cveId":21,"name":73,"severity":26,"cvss":24,"added":74,"epss":27,"published":103,"ranges":104,"checked":4,"hits":105,"covers":34},"2016-06-07T14:06:13.247",[14],[],0]