Integration Service Registry

integration_service_registry

Vendor: Redhat • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-44487 33Akka AmazonApache+30 more 165.net 3scale Api Management PlatformAdvanced Cluster Management For Kubernetes+162 more Jun 17, 2026 Oct 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2023-4853 2Quarkus Redhat 12Build Of Optaplanner Build Of QuarkusDecision Manager+9 more Jun 17, 2026 Sep 20, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an at...Show more A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.Show less
CVE-2023-1108 2Netapp Redhat 16Build Of Quarkus Decision ManagerFuse+13 more Jun 17, 2026 Sep 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.
CVE-2022-41862 3Fedoraproject PostgresqlRedhat 6Enterprise Linux FedoraIntegration Camel K+3 more Jun 17, 2026 Mar 3, 2023 N/A· v4 3.7 LOW· v3 N/A· v2 In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report...Show more In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.Show less
CVE-2022-4492 1Redhat 10Build Of Quarkus Integration Camel For Spring BootIntegration Camel K+7 more Jun 17, 2026 Feb 23, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add...Show more The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.Show less
CVE-2022-1278 1Redhat 8Amq Amq OnlineIntegration Camel K+5 more Jun 17, 2026 Sep 13, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 A flaw was found in WildFly, where an attacker can see deployment names, endpoints, and any other data the trace payload may contain.
CVE-2021-3536 1Redhat 9Build Of Quarkus Data GridDescision Manager+6 more Jun 17, 2026 May 20, 2021 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality...Show more A flaw was found in Wildfly in versions before 23.0.2.Final while creating a new role in domain mode via the admin console, it is possible to add a payload in the name field, leading to XSS. This affects Confidentiality and Integrity.Show less