VIR Vulnerability Intelligence Relay

Package impact

java Maven / org.jboss.resteasy:resteasy-client

Severitycriticalhighmediumlowunknown
0
KEVHas exploit
Reset
CVE Severity CVSS Risk Published Description Impact
CVE-2014-3490 high — 7.5 12y ago Incorrect Privilege Assignment in RESTEasy javaredhat
CVE-2016-6345 medium 6.5 6.5 10y ago RESTEasy allows remote authenticated users to obtain sensitive information by leveraging "insufficient use of random values" in async jobs. debianjavaredhat
CVE-2016-6347 medium 6.1 6.1 9y ago Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. debianjavaredhat
CVE-2016-6348 medium 6.1 6.1 9y ago JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack. debianjavaredhat
CVE-2020-1695 medium — 5.5 4y ago Improper Input Validation in RESTEasy rockylinuxdebianjava
CVE-2012-0818 medium — 5.0 14y ago Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy javaredhat
CVE-2020-25633 unknown — — 5y ago A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicatio… debianjava