Search for packages
| purl | pkg:rpm/redhat/jboss-as-configadmin@7.3.4-1.Final_redhat_1.1.ep6?arch=el5 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-7ghg-a6dy-tkb2
Aliases: CVE-2014-0034 GHSA-38x2-fp9m-87mx |
The SecurityTokenService (STS) in Apache CXF before 2.6.12 and 2.7.x before 2.7.9 does not properly validate SAML tokens when caching is enabled, which allows remote attackers to gain access via an invalid SAML token. | There are no reported fixed by versions. |
|
VCID-gbpn-pskk-qbae
Aliases: CVE-2014-0109 GHSA-5wqf-h3r3-gxvh |
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (memory consumption) via a large request with the Content-Type set to text/html to a SOAP endpoint, which triggers an error. | There are no reported fixed by versions. |
|
VCID-m18p-dpdb-skf7
Aliases: CVE-2014-0035 GHSA-v45r-rj5x-hpg2 |
The SymmetricBinding in Apache CXF before 2.6.13 and 2.7.x before 2.7.10, when EncryptBeforeSigning is enabled and the UsernameToken policy is set to an EncryptedSupportingToken, transmits the UsernameToken in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network. | There are no reported fixed by versions. |
|
VCID-qsde-tz92-xqge
Aliases: CVE-2014-0110 GHSA-5xf9-3v63-ww6f |
Apache CXF before 2.6.14 and 2.7.x before 2.7.11 allows remote attackers to cause a denial of service (/tmp disk consumption) via a large invalid SOAP message. | There are no reported fixed by versions. |
|
VCID-wv41-f9qq-xfgs
Aliases: CVE-2014-3481 |
JAX-RS: Information disclosure via XML eXternal Entity (XXE) | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-01T14:48:16.607359+00:00 | RedHat Importer | Affected by | VCID-m18p-dpdb-skf7 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0035.json | 38.0.0 |
| 2026-04-01T14:48:13.784481+00:00 | RedHat Importer | Affected by | VCID-7ghg-a6dy-tkb2 | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0034.json | 38.0.0 |
| 2026-04-01T14:48:10.871989+00:00 | RedHat Importer | Affected by | VCID-qsde-tz92-xqge | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0110.json | 38.0.0 |
| 2026-04-01T14:48:07.875287+00:00 | RedHat Importer | Affected by | VCID-gbpn-pskk-qbae | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0109.json | 38.0.0 |
| 2026-04-01T14:47:42.549046+00:00 | RedHat Importer | Affected by | VCID-wv41-f9qq-xfgs | https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3481.json | 38.0.0 |