Red Hat JBoss Enterprise Application Platform (EAP) 7.3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3.0:*:*:*:*:*:*:*
part: a version: 7.3.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Jboss Enterprise Application Platform (1fae2c77-9ea1-5c62-8727-311c31afda6c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-1710 |
vulnerable | 2026-06-08 05:21:02.851726 |
Details available
The issue appears to be that JBoss EAP 6.4.21 does not parse the field-name in accordance to RFC7230[1] as it returns a 200 instead of a 400.
Published: 2020-09-16T14:28:20.000Z
Updated: 2024-08-04T06:46:30.214Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10693 |
vulnerable | 2026-06-08 05:16:35.669346 |
Details available
MEDIUM (5.3)
A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attackers to bypass input sanitation (escaping, stripping) controls that developers may have put in place when handling user-controlled data in error messages.
Published: 2020-05-06T13:03:33.000Z
Updated: 2024-08-04T11:06:11.169Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9518 |
vulnerable | 2026-06-08 05:14:25.671707 |
Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service
HIGH (7.5)
Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with an empty payload and without the end-of-stream flag. These frames can be DATA, HEADERS, CONTINUATION and/or PUSH_PROMISE. The peer spends time processing each frame disproportionate to attack bandwidth. This can consume excess CPU.
Published: 2019-08-13T20:50:59.000Z
Updated: 2024-08-04T21:54:44.510Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9517 |
vulnerable | 2026-06-08 05:14:25.661639 |
Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service
HIGH (7.5)
Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without constraint; however, they leave the TCP window closed so the peer cannot actually write (many of) the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the servers queue the responses, this can consume excess memory, CPU, or both.
Published: 2019-08-13T20:50:59.000Z
Updated: 2024-08-04T21:54:44.675Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9516 |
vulnerable | 2026-06-08 05:14:25.650829 |
Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service
HIGH (7.5)
Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory.
Published: 2019-08-13T20:50:59.000Z
Updated: 2024-08-04T21:54:44.285Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9515 |
vulnerable | 2026-06-08 05:14:25.647803 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9514 |
vulnerable | 2026-06-08 05:14:25.636263 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9513 |
vulnerable | 2026-06-08 05:14:25.626938 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9511 |
vulnerable | 2026-06-08 05:14:25.611063 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14838 |
vulnerable | 2026-06-08 05:12:56.234847 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.