RHSA-2022:5460HighCVSS 8.8

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.24 security update

Published
June 30, 2022
Last Modified
May 28, 2026

🔗 CVE IDs covered (6)

CVE-2022-23305 →CVE-2022-23307 →CVE-2020-13935 →CVE-2020-14384 →CVE-2021-4104 →CVE-2022-23302 →

📋 Description

CVE-2020-13935 — tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS CVE-2020-14384 — jbossweb: Incomplete fix of CVE-2020-13935 for WebSocket in JBossWeb could lead to DoS CVE-2021-4104 — log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender CVE-2022-23302 — log4j: Remote code execution in Log4j 1.x when application is configured to use JMSSink CVE-2022-23305 — log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender CVE-2022-23307 — log4j: Unsafe deserialization flaw in Chainsaw log viewer

🔗 References (13)