Known vulnerabilities in eap7-elytron-web (Red Hat package)
Vendor:
Red Hat Inc.
Software:
eap7-elytron-web (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:eap7-elytron-web_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
24
Public exploits:
5
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.9.6-2.Final_redhat_00001.1.el9eap
1.9.6-2.Final_redhat_00001.1.el8eap
1.9.6-2.Final_redhat_00001.1.el7eap
1.9.6-1.Final_redhat_00001.1.el8eap
1.0.1-1.Final_redhat_1.1.ep7.el6
1.0.1-1.Final_redhat_1.1.ep7.el7
1.9.4-1.Final_redhat_00001.1.el9eap
1.9.4-1.Final_redhat_00001.1.el8eap
1.9.4-1.Final_redhat_00001.1.el7eap
1.9.3-1.Final_redhat_00001.1.el9eap
1.9.3-1.Final_redhat_00001.1.el8eap
1.9.3-1.Final_redhat_00001.1.el7eap
1.9.1-1.Final_redhat_00001.1.el8eap
1.9.1-1.Final_redhat_00001.1.el7eap
1.2.5-1.Final_redhat_00001.1.el8eap
1.2.5-1.Final_redhat_00001.1.el7eap
1.2.5-1.Final_redhat_00001.1.el6eap
1.6.2-1.Final_redhat_00001.1.el8eap
1.6.2-1.Final_redhat_00001.1.el7eap
1.6.2-1.Final_redhat_00001.1.el6eap
1.6.1-1.Final_redhat_00001.1.el7eap
1.6.1-1.Final_redhat_00001.1.el6eap
1.6.1-1.Final_redhat_00001.1.el8eap
1.2.4-1.Final_redhat_00001.1.el7eap
1.2.4-1.Final_redhat_00001.1.el6eap
1.9.2-2.Final_redhat_00001.1.el7eap
1.9.2-2.Final_redhat_00001.1.el8eap
Vulnerabilities (24)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU88156 - Resource exhaustion CVE-2023-1973 |
CWE-400 | Medium | 1.9.4-1.Final_redhat_00001.1.el7eap, 1.9.4-1.Final_redhat_00001.1.el8eap, 1.9.4-1.Final_redhat_00001.1.el9eap | 04.04.2024 |
SB2024040460 SB2024040537 SB2024040538 and 5 more |
||
| #VU88155 - Improper input validation CVE-2023-4639 |
CWE-20 | Medium | 1.9.4-1.Final_redhat_00001.1.el7eap, 1.9.4-1.Final_redhat_00001.1.el8eap, 1.9.4-1.Final_redhat_00001.1.el9eap | 04.04.2024 |
SB2024040460 SB2024040537 SB2024040538 and 5 more |
||
| #VU88154 - Resource exhaustion CVE-2024-1635 |
CWE-400 | Medium | 1.9.4-1.Final_redhat_00001.1.el7eap, 1.9.4-1.Final_redhat_00001.1.el8eap, 1.9.4-1.Final_redhat_00001.1.el9eap | 04.04.2024 |
SB2024040460 SB2024040537 SB2024040538 and 8 more |
||
| #VU84537 - Inadequate Encryption Strength CVE-2023-48795 |
CWE-326 | Low | 1.9.4-1.Final_redhat_00001.1.el7eap, 1.9.4-1.Final_redhat_00001.1.el8eap, 1.9.4-1.Final_redhat_00001.1.el9eap | 19.12.2023 |
SB2023121903 SB2023121905 SB2023121906 and 343 more |
||
| #VU79114 - Resource exhaustion CVE-2023-3223 |
CWE-400 | Medium | 1.9.4-1.Final_redhat_00001.1.el7eap, 1.9.4-1.Final_redhat_00001.1.el8eap, 1.9.4-1.Final_redhat_00001.1.el9eap | 08.08.2023 |
SB2023080810 SB2023080815 SB2023080816 and 12 more |
||
| #VU71713 - Observable discrepancy CVE-2022-3143 |
CWE-203 | Medium | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 31.01.2023 |
SB2023013123 SB2023013124 SB2023013125 and 3 more |
||
| #VU71586 - Out-of-bounds write CVE-2022-40152 |
CWE-787 | Medium | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 26.01.2023 |
SB2023012669 SB2023012670 SB2023013124 and 52 more |
||
| #VU69674 - Resource exhaustion CVE-2022-40150 |
CWE-400 | Medium | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 29.11.2022 |
SB2022112909 SB2022112941 SB2022121101 and 46 more |
||
| #VU69673 - Out-of-bounds write CVE-2022-40149 |
CWE-787 | Medium | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 29.11.2022 |
SB2022112909 SB2022112941 SB2022121101 and 41 more |
||
| #VU68635 - Deserialization of Untrusted Data CVE-2022-42003 |
CWE-502 | Medium | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 25.10.2022 |
SB2022102509 SB2022102510 SB2022103117 and 208 more |
||
| #VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11023 |
CWE-79 | Low | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 05.05.2020 |
SB2020042126 SB2020052033 SB2020052103 and 180 more |
||
| #VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022 |
CWE-79 | Low | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 21.04.2020 |
SB2020042126 SB2020052033 SB2020052103 and 181 more |
||
| #VU21707 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2016-10735 |
CWE-79 | Low | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 10.10.2019 |
SB2019010911 SB2019101009 SB2020093090 and 21 more |
||
| #VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358 |
CWE-1321 | Low | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 28.03.2019 |
SB2019032804 SB2019041026 SB2019041801 and 155 more |
||
| #VU17694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-8331 |
CWE-79 | Low | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 14.02.2019 |
SB2019021412 SB2019031501 SB2019101009 and 28 more |
||
| #VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2015-9251 |
CWE-79 | Low | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 31.07.2018 |
SB2018080106 SB2019011705 SB2019100301 and 63 more |
||
| #VU13903 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-14041 |
CWE-79 | Low | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 18.07.2018 |
SB2018071803 SB2019031501 SB2023013124 and 8 more |
||
| #VU13902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-14042 |
CWE-79 | Low | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 18.07.2018 |
SB2018071803 SB2020093090 SB2020110508 and 22 more |
||
| #VU13901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-14040 |
CWE-79 | Low | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 17.07.2018 |
SB2018071803 SB2019031501 SB2020093090 and 24 more |
||
| #VU11300 - Resource exhaustion CVE-2017-18214 |
CWE-400 | Low | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 28.03.2018 |
SB2017090813 SB2022022516 SB2022101031 and 8 more |
Showing elements 1 - 20 out of 24