Enterprise Build of Quarkus vulnerabilities
3 known vulnerabilities in Enterprise Build of Quarkus from IBM. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.6 High severity
Enterprise Build of Quarkus: Improper Neutralization of Special Elements used in an SQL Command
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.33.3.SP1 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or dele
- 7.4 High severity
Enterprise Build of Quarkus: Authorization Bypass Through User-Controlled Key
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input.
- 7.5 High severity
Enterprise Build of Quarkus: Allocation of Resources Without Limits or Throttling
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quarkus REST could allow a remote attacker to cause a denial of service due to unbounded accumulation of multipart MIME part-header bytes.