CVE-2015-1849

Description

References

• bugzilla.redhat.com/show_bug.cgi · Exploit
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• wildfly-security/jboss-negotiation commit 0dc9d19 · Third Party Advisory
• wildfly-security/jboss-negotiation#21 · Third Party Advisory

More vulnerabilities in jboss enterprise application platform

• CVE-2026-49875CRITICAL 9.8Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening conf…
• CVE-2026-28369CRITICAL 9.1A flaw was found in Undertow. When Undertow receives an HTTP request where the first header line starts with one or more spaces, it incorrec…
• CVE-2026-28368CRITICAL 9.1A flaw was found in Undertow. This vulnerability allows a remote attacker to construct specially crafted requests where header names are par…
• CVE-2026-28367CRITICAL 9.1A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending `\r\r\r` as a header block terminator. This can be…
• CVE-2026-3121HIGH 7.2A flaw was found in Keycloak. An administrator with `manage-clients` permission can exploit a misconfiguration where this permission is equi…