Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2022:5928
HistoryAug 08, 2022 - 7:39 p.m.

(RHSA-2022:5928) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.6 Security update

2022-08-0819:39:55
access.redhat.com
55

0.035 Low

EPSS

Percentile

91.6%

JSON

Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release of Red Hat JBoss Enterprise Application Platform 7.4.6 serves as a replacement for Red Hat JBoss Enterprise Application Platform 7.4.5, and includes bug fixes and enhancements. See the Red Hat JBoss Enterprise Application Platform 7.4.6 Release Notes for information about the most significant bug fixes and enhancements included in this release.
Security Fix(es):

  • com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson (CVE-2022-25647)

  • org.jboss.hal-hal-parent: minimist: prototype pollution (CVE-2021-44906)

  • netty: world readable temporary file containing sensitive data (CVE-2022-24823)

Related

nessus 49
redhat 16
ibm 35
prion 3
ubuntucve 3
cvelist 3
cve 3
githubexploit 1
veracode 3
cgr 2
redos 1
debiancve 3
alpinelinux 1
openvas 18
redhatcve 3
atlassian 4
osv 17
mageia 2
nvd 3
github 3
suse 5
f5 1
debian 3
ubuntu 1
broadcom 2
wolfi 1
thn 2
rocky 3
almalinux 3
oraclelinux 3
hivepro 1
freebsd 1
nessus
nessus
RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.6 Security update (Moderate) (RHSA-2022:5892)
2022-08-04 00:00:00
RHEL 8 : Red Hat JBoss Enterprise Application Platform 7.4.6 Security update (Moderate) (RHSA-2022:5893)
2022-08-04 00:00:00
RHEL 9 : Red Hat JBoss Enterprise Application Platform 7.4.6 Security update. (Moderate) (RHSA-2022:5894)
2022-08-08 00:00:00
redhat
redhat
(RHSA-2022:5894) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.6 Security update.
2022-08-03 15:37:48
(RHSA-2022:5892) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.6 Security update
2022-08-03 15:36:19
(RHSA-2022:5893) Moderate: Red Hat JBoss Enterprise Application Platform 7.4.6 Security update
2022-08-03 15:36:29
ibm
ibm
Security Bulletin: IBM Cognos Analytics has addressed a vulnerability (CVE-2021-44906)
2023-07-27 21:13:11
Security Bulletin: Open Source Dependency Vulnerability
2023-05-15 17:14:54
Security Bulletin: IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is affected by vulnerability in Netty (CVE-2022-24823)
2022-06-29 07:17:58
prion
prion
Code injection
2022-03-17 16:15:00
Deserialization of untrusted data
2022-05-01 16:15:00
Information disclosure
2022-05-06 12:15:00
ubuntucve
ubuntucve
CVE-2021-44906
2022-03-17 00:00:00
CVE-2022-25647
2022-05-01 00:00:00
CVE-2022-24823
2022-05-06 00:00:00
cvelist
cvelist
CVE-2021-44906
2022-03-17 13:05:57
CVE-2022-25647 Deserialization of Untrusted Data
2022-05-01 00:00:00
CVE-2022-24823 Local Information Disclosure Vulnerability in io.netty:netty-codec-http
2022-05-06 12:05:11
cve
cve
CVE-2021-44906
2022-03-17 16:15:07
CVE-2022-25647
2022-05-01 16:15:08
CVE-2022-24823
2022-05-06 12:15:08
githubexploit
githubexploit
Exploit for Prototype Pollution in Substack Minimist
2023-10-02 15:20:35
veracode
veracode
Prototype Pollution
2022-03-18 02:42:04
Denial Of Service (DoS)
2022-05-04 14:43:44
Information Disclosure
2022-05-09 05:01:24
cgr
cgr
CVE-2022-24823 vulnerabilities
2024-05-19 03:07:16
CVE-2022-25647 vulnerabilities
2024-05-19 03:07:16
redos
redos
ROS-20240507-05
2024-05-07 00:00:00
debiancve
debiancve
CVE-2021-44906
2022-03-17 16:15:07
CVE-2022-25647
2022-05-01 16:15:08
CVE-2022-24823
2022-05-06 12:15:08
alpinelinux
alpinelinux
CVE-2022-25647
2022-05-01 16:15:08
openvas
openvas
Ubuntu: Security Advisory (USN-6692-1)
2024-03-13 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2044-1)
2022-06-13 00:00:00
Mageia: Security Advisory (MGASA-2023-0035)
2023-03-28 00:00:00
redhatcve
redhatcve
CVE-2022-25647
2022-05-02 07:38:06
CVE-2021-44906
2022-03-19 23:40:42
CVE-2022-24823
2022-05-17 15:01:10
atlassian
atlassian
DoS (Denial of Service) com.google.code.gson:gson in Jira Software Data Center and Server
2023-11-12 13:45:35
com.google.code.gson Vulnerability in Bitbucket Data Center and Server
2023-10-04 19:45:55
DoS (Denial of Service) com.google.code.gson:gson Dependency in Crucible Data Center and Server
2024-05-21 10:14:25
osv
osv
CVE-2022-25647
2022-05-01 16:15:08
Prototype Pollution in minimist
2022-03-18 00:01:09
libgoogle-gson-java - security update
2022-05-13 00:00:00
mageia
mageia
Updated nodejs-minimist packages fix security vulnerability
2023-02-07 03:06:39
Updated google-gson packages fix security vulnerability
2022-09-21 21:15:27
nvd
nvd
CVE-2021-44906
2022-03-17 16:15:07
CVE-2022-25647
2022-05-01 16:15:08
CVE-2022-24823
2022-05-06 12:15:08
github
github
Prototype Pollution in minimist
2022-03-18 00:01:09
Deserialization of Untrusted Data in Gson
2022-05-03 00:00:44
Local Information Disclosure Vulnerability in io.netty:netty-codec-http
2022-05-10 08:46:50
suse
suse
Security update for google-gson (important)
2022-06-10 00:00:00
Security update for nodejs8 (moderate)
2022-05-17 00:00:00
Security update for nodejs12 (important)
2022-04-28 00:00:00
f5
f5
K00994461: GSON vulnerability CVE-2022-25647
2022-08-29 00:00:00
debian
debian
[SECURITY] [DSA 5227-1] libgoogle-gson-java security update
2022-09-07 10:22:18
[SECURITY] [DLA 3001-1] libgoogle-gson-java security update
2022-05-13 21:45:43
[SECURITY] [DLA 3100-1] libgoogle-gson-java security update
2022-09-07 09:14:24
ubuntu
ubuntu
Gson vulnerability
2024-03-12 00:00:00
broadcom
broadcom
The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization
2023-08-29 00:00:00
Oracle Java SE Multiple Vulnerabilities (July 2022 CPU update) CVE-2022-21540 CVE-2022-21541 CVE-2022-21549 CVE-2022-25647 CVE-2022-34169
2023-08-29 00:00:00
wolfi
wolfi
CVE-2022-25647 vulnerabilities
2024-07-01 09:08:36
thn
thn
Solving the indirect vulnerability enigma - fixing indirect vulnerabilities without breaking your dependency tree
2022-07-01 09:45:00
High-Severity Flaws Uncovered in Atlassian Products and ISC BIND Server
2023-09-22 08:00:00
rocky
rocky
nodejs and nodejs-nodemon security, bug fix, and enhancement update
2023-01-23 14:30:11
nodejs:14 security, bug fix, and enhancement update
2023-01-09 14:24:14
nodejs:16 security, bug fix, and enhancement update
2022-12-15 15:42:25
almalinux
almalinux
Moderate: nodejs and nodejs-nodemon security, bug fix, and enhancement update
2023-01-23 00:00:00
Moderate: nodejs:14 security, bug fix, and enhancement update
2023-01-09 00:00:00
Moderate: nodejs:16 security, bug fix, and enhancement update
2022-12-15 00:00:00
oraclelinux
oraclelinux
nodejs and nodejs-nodemon security, bug fix, and enhancement update
2023-01-24 00:00:00
nodejs:14 security, bug fix, and enhancement update
2023-01-09 00:00:00
nodejs:16 security, bug fix, and enhancement update
2022-12-16 00:00:00
hivepro
hivepro
Critical Security Vulnerabilities Discovered in Atlassian Products
2023-09-27 10:22:43
freebsd
freebsd
cassandra3 -- multiple vulnerabilities
2023-01-11 00:00:00

0.035 Low

EPSS

Percentile

91.6%

JSON
Related for RHSA-2022:5928
nessus49redhat16ibm35prion3ubuntucve3cvelist3cve3githubexploit1veracode3cgr2redos1debiancve3alpinelinux1openvas18redhatcve3atlassian4osv17mageia2nvd3github3suse5f51debian3ubuntu1broadcom2wolfi1thn2rocky3almalinux3oraclelinux3hivepro1freebsd1