Known vulnerabilities in JBoss Data Grid 8.4.3

Version: 8.4.3
Software CPE: cpe:2.3:a:red_hat:jboss_data_grid:*:*:*:*:*:*:*:*
Total vulnerabilities: 12
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting JBoss Data Grid version 8.4.3 JBoss Data Grid 8.4.3 is affected by 12 vulnerabilities: 2 high, 5 medium, 5 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86625 - Resource exhaustion
CVE-2024-26308
CWE-400 Medium
No
No
8.4.7 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 137 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710
CWE-835 Medium
No
No
8.4.7 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 101 more
#VU84091 - Cleartext Transmission of Sensitive Information
CVE-2023-5384
CWE-319 Low
No
No
8.4.6 12.12.2023 SB2023121203
SB2025032016
#VU84031 - Improper Certificate Validation
CVE-2023-4586
CWE-295 Medium
No
No
8.4.6 08.12.2023 SB2023121105
SB2023121203
SB20231222102
and 15 more
#VU83977 - Insufficient Entropy
CVE-2023-31582
CWE-331 Medium
No
No
8.4.6 07.12.2023 SB2023120724
SB2023120727
SB2023120731
and 17 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Public exploit available
Exploited
7.3.11, 8.4.5 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU81430 - Resource Management Errors
CVE-2023-5236
CWE-399 Low
No
No
8.4.4 03.10.2023 SB2023100337
SB2025032016
#VU81429 - Improper Access Control
CVE-2023-3629
CWE-284 Low
No
No
8.4.4 03.10.2023 SB2023100337
#VU81428 - Improper Access Control
CVE-2023-3628
CWE-284 Low
No
No
8.4.4 03.10.2023 SB2023100337
#VU81427 - UNIX Symbolic Link (Symlink) Following
CVE-2023-35887
CWE-61 Low
No
No
8.4.4 03.10.2023 SB2023100336
SB2023100337
SB2023100453
and 21 more
#VU77573 - Resource exhaustion
CVE-2023-34462
CWE-400 Medium
No
No
8.4.4 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047
CWE-502 High
Public exploit available
No
8.4.1, 8.4.4 28.12.2022 SB2022122828
SB2022122920
SB2023011148
and 49 more