Known vulnerabilities in eap7-apache-sshd (Red Hat package)
Vendor:
Red Hat Inc.
Software:
eap7-apache-sshd (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:eap7-apache-sshd_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
27
Public exploits:
6
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (27)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU84537 - Inadequate Encryption Strength CVE-2023-48795 |
CWE-326 | Low | 2.12.1-1.redhat_00001.1.el7eap, 2.12.1-1.redhat_00001.1.el8eap, 2.12.1-1.redhat_00001.1.el9eap | 19.12.2023 |
SB2023121903 SB2023121905 SB2023121906 and 343 more |
||
| #VU83849 - Improper Access Control CVE-2023-4503 |
CWE-284 | Medium | 2.9.3-1.redhat_00001.1.el7eap, 2.9.3-1.redhat_00001.1.el8eap, 2.9.3-1.redhat_00001.1.el9eap | 04.12.2023 |
SB2023120447 SB2023120448 SB2023120449 and 4 more |
||
| #VU83219 - Deserialization of Untrusted Data CVE-2023-39410 |
CWE-502 | Medium | 2.9.3-1.redhat_00001.1.el7eap, 2.9.3-1.redhat_00001.1.el8eap, 2.9.3-1.redhat_00001.1.el9eap | 16.11.2023 |
SB2023111614 SB2023112014 SB2023112410 and 43 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 2.9.3-1.redhat_00001.1.el7eap, 2.9.3-1.redhat_00001.1.el8eap, 2.9.3-1.redhat_00001.1.el9eap | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 650 more |
||
| #VU81427 - UNIX Symbolic Link (Symlink) Following CVE-2023-35887 |
CWE-61 | Low | 2.9.3-1.redhat_00001.1.el7eap, 2.9.3-1.redhat_00001.1.el8eap, 2.9.3-1.redhat_00001.1.el9eap | 03.10.2023 |
SB2023100336 SB2023100337 SB2023100453 and 21 more |
||
| #VU77107 - Incorrect Default Permissions CVE-2023-2976 |
CWE-276 | Low | 2.9.3-1.redhat_00001.1.el7eap, 2.9.3-1.redhat_00001.1.el8eap, 2.9.3-1.redhat_00001.1.el9eap | 08.06.2023 |
SB2023060849 SB2023071712 SB2023072512 and 157 more |
||
| #VU75218 - Resource exhaustion CVE-2023-26048 |
CWE-400 | Medium | 2.9.3-1.redhat_00001.1.el7eap, 2.9.3-1.redhat_00001.1.el8eap, 2.9.3-1.redhat_00001.1.el9eap | 18.04.2023 |
SB2023041842 SB2023051753 SB2023060701 and 55 more |
||
| #VU75217 - Improper input validation CVE-2023-26049 |
CWE-20 | Low | 2.9.3-1.redhat_00001.1.el7eap, 2.9.3-1.redhat_00001.1.el8eap, 2.9.3-1.redhat_00001.1.el9eap | 18.04.2023 |
SB2023041842 SB2023051821 SB2023060836 and 78 more |
||
| #VU69674 - Resource exhaustion CVE-2022-40150 |
CWE-400 | Medium | 2.9.2-1.redhat_00001.1.el7eap, 2.9.2-1.redhat_00001.1.el8eap, 2.9.2-1.redhat_00001.1.el9eap | 29.11.2022 |
SB2022112909 SB2022112941 SB2022121101 and 46 more |
||
| #VU69673 - Out-of-bounds write CVE-2022-40149 |
CWE-787 | Medium | 2.9.2-1.redhat_00001.1.el7eap, 2.9.2-1.redhat_00001.1.el8eap, 2.9.2-1.redhat_00001.1.el9eap | 29.11.2022 |
SB2022112909 SB2022112941 SB2022121101 and 41 more |
||
| #VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11023 |
CWE-79 | Low | 2.9.2-1.redhat_00001.1.el7eap, 2.9.2-1.redhat_00001.1.el8eap, 2.9.2-1.redhat_00001.1.el9eap | 05.05.2020 |
SB2020042126 SB2020052033 SB2020052103 and 180 more |
||
| #VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022 |
CWE-79 | Low | 2.9.2-1.redhat_00001.1.el7eap, 2.9.2-1.redhat_00001.1.el8eap, 2.9.2-1.redhat_00001.1.el9eap | 21.04.2020 |
SB2020042126 SB2020052033 SB2020052103 and 181 more |
||
| #VU21707 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2016-10735 |
CWE-79 | Low | 2.9.2-1.redhat_00001.1.el7eap, 2.9.2-1.redhat_00001.1.el8eap, 2.9.2-1.redhat_00001.1.el9eap | 10.10.2019 |
SB2019010911 SB2019101009 SB2020093090 and 21 more |
||
| #VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358 |
CWE-1321 | Low | 2.9.2-1.redhat_00001.1.el7eap, 2.9.2-1.redhat_00001.1.el8eap, 2.9.2-1.redhat_00001.1.el9eap | 28.03.2019 |
SB2019032804 SB2019041026 SB2019041801 and 155 more |
||
| #VU17694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-8331 |
CWE-79 | Low | 2.9.2-1.redhat_00001.1.el7eap, 2.9.2-1.redhat_00001.1.el8eap, 2.9.2-1.redhat_00001.1.el9eap | 14.02.2019 |
SB2019021412 SB2019031501 SB2019101009 and 28 more |
||
| #VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2015-9251 |
CWE-79 | Low | 2.9.2-1.redhat_00001.1.el7eap, 2.9.2-1.redhat_00001.1.el8eap, 2.9.2-1.redhat_00001.1.el9eap | 31.07.2018 |
SB2018080106 SB2019011705 SB2019100301 and 63 more |
||
| #VU13903 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-14041 |
CWE-79 | Low | 2.9.2-1.redhat_00001.1.el7eap, 2.9.2-1.redhat_00001.1.el8eap, 2.9.2-1.redhat_00001.1.el9eap | 18.07.2018 |
SB2018071803 SB2019031501 SB2023013124 and 8 more |
||
| #VU13902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-14042 |
CWE-79 | Low | 2.9.2-1.redhat_00001.1.el7eap, 2.9.2-1.redhat_00001.1.el8eap, 2.9.2-1.redhat_00001.1.el9eap | 18.07.2018 |
SB2018071803 SB2020093090 SB2020110508 and 22 more |
||
| #VU13901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-14040 |
CWE-79 | Low | 2.9.2-1.redhat_00001.1.el7eap, 2.9.2-1.redhat_00001.1.el8eap, 2.9.2-1.redhat_00001.1.el9eap | 17.07.2018 |
SB2018071803 SB2019031501 SB2020093090 and 24 more |
||
| #VU11300 - Resource exhaustion CVE-2017-18214 |
CWE-400 | Low | 2.9.2-1.redhat_00001.1.el7eap, 2.9.2-1.redhat_00001.1.el8eap, 2.9.2-1.redhat_00001.1.el9eap | 28.03.2018 |
SB2017090813 SB2022022516 SB2022101031 and 8 more |
Showing elements 1 - 20 out of 27