Red Hat Integration Service Registry
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:integration_service_registry:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Integration Service Registry (8f2f1af9-7759-53f0-bc6e-23060eb31c6e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/apicurio/apicurio-registry |
purl2cpe | 2026-06-01 10:12:57.368083 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4853 |
vulnerable | 2026-06-08 06:16:14.736830 |
Quarkus: http security policy bypass
HIGH (8.1)
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.
Published: 2023-09-20T09:47:32.150Z
Updated: 2025-11-07T10:17:29.266Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44487 |
vulnerable | 2026-06-08 06:12:41.221113 |
Details available
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Published: 2023-10-10T00:00:00.000Z
Updated: 2026-07-14T12:03:17.389Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1108 |
vulnerable | 2026-06-08 05:52:33.880276 |
Undertow: infinite loop in sslconduit during close
HIGH (7.5)
A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.
Published: 2023-09-14T14:48:58.869Z
Updated: 2024-08-02T05:32:46.370Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4492 |
vulnerable | 2026-06-08 05:51:59.606947 |
Details available
The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.
Published: 2023-02-23T00:00:00.000Z
Updated: 2025-03-12T14:34:50.123Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41862 |
vulnerable | 2026-06-08 05:49:28.769809 |
Details available
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
Published: 2023-03-03T00:00:00.000Z
Updated: 2025-03-07T16:03:01.364Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1278 |
vulnerable | 2026-06-08 05:39:12.609614 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3536 |
vulnerable | 2026-06-08 05:33:52.730602 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.