Red hat decision manager 7

This hub aggregates every CVE we track for Red hat decision manager 7, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 12 most recently published vulnerabilities affecting Red hat decision manager 7.

• CVE-2023-4639Undertow: cookie smuggling/spoofing7.4Nov 17, 2024
• CVE-2023-1932Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss6.1Nov 7, 2024
• CVE-2023-6717Keycloak: xss via assertion consumer service url in saml post-binding flow6.0Apr 25, 2024
• CVE-2024-1249Keycloak: org.keycloak.protocol.oidc: unvalidated cross-origin messages in checkloginiframe leads to ddos7.4Apr 17, 2024
• CVE-2024-1132Keycloak: path transversal in redirection validation8.1Apr 17, 2024
• CVE-2024-1459Undertow: directory traversal vulnerability5.3Feb 12, 2024
• CVE-2023-6291Keycloak: redirect_uri validation bypass7.1Jan 26, 2024
• CVE-2023-5379Undertow: ajp request closes connection exceeding maxrequestsize7.5Dec 12, 2023
• CVE-2023-3223Undertow: outofmemoryerror due to @multipartconfig handling7.5Sep 27, 2023
• CVE-2022-4245Codehaus-plexus: xml external entity (xxe) injection4.3Sep 25, 2023
• CVE-2022-4244Codehaus-plexus: directory traversal7.5Sep 25, 2023
• CVE-2022-1415Drools: unsafe data deserialization in streamutils8.1Sep 11, 2023