Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:migration_toolkit_for_applications:6.0:*:*:*:*:*:*:*

part: a version: 6.0 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductMigration Toolkit For Applications (380a10ab-7bec-5c30-bae1-d4cd4d4c9d59)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6291 vulnerable 2026-06-08 06:19:46.871826 Keycloak: redirect_uri validation bypass
HIGH (7.1)
A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users.
Published: 2024-01-26T14:23:43.185Z
Updated: 2025-11-11T16:12:14.005Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44487 vulnerable 2026-06-08 06:12:41.232366 Details available
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Published: 2023-10-10T00:00:00.000Z
Updated: 2026-07-14T12:03:17.389Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4492 vulnerable 2026-06-08 05:51:59.609966 Details available
The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.
Published: 2023-02-23T00:00:00.000Z
Updated: 2025-03-12T14:34:50.123Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.