Known vulnerabilities in eap7-elytron-web (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
eap7-elytron-web (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:eap7-elytron-web_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
24
Public exploits:
5
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.9.6-2.Final_redhat_00001.1.el9eap
1.9.6-2.Final_redhat_00001.1.el8eap
1.9.6-2.Final_redhat_00001.1.el7eap
1.9.6-1.Final_redhat_00001.1.el8eap
1.0.1-1.Final_redhat_1.1.ep7.el6
1.0.1-1.Final_redhat_1.1.ep7.el7
1.9.4-1.Final_redhat_00001.1.el9eap
1.9.4-1.Final_redhat_00001.1.el8eap
1.9.4-1.Final_redhat_00001.1.el7eap
1.9.3-1.Final_redhat_00001.1.el9eap
1.9.3-1.Final_redhat_00001.1.el8eap
1.9.3-1.Final_redhat_00001.1.el7eap
1.9.1-1.Final_redhat_00001.1.el8eap
1.9.1-1.Final_redhat_00001.1.el7eap
1.2.5-1.Final_redhat_00001.1.el8eap
1.2.5-1.Final_redhat_00001.1.el7eap
1.2.5-1.Final_redhat_00001.1.el6eap
1.6.2-1.Final_redhat_00001.1.el8eap
1.6.2-1.Final_redhat_00001.1.el7eap
1.6.2-1.Final_redhat_00001.1.el6eap
1.6.1-1.Final_redhat_00001.1.el7eap
1.6.1-1.Final_redhat_00001.1.el6eap
1.6.1-1.Final_redhat_00001.1.el8eap
1.2.4-1.Final_redhat_00001.1.el7eap
1.2.4-1.Final_redhat_00001.1.el6eap
1.9.2-2.Final_redhat_00001.1.el7eap
1.9.2-2.Final_redhat_00001.1.el8eap
Vulnerabilities (24)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU71109 - Out-of-bounds write CVE-2022-45693 |
CWE-787 | Medium | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 11.01.2023 |
SB2023011159 SB2023011160 SB2023013112 and 45 more |
||
| #VU70530 - Deserialization of Untrusted Data CVE-2022-45047 |
CWE-502 | High | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 28.12.2022 |
SB2022122828 SB2022122920 SB2023011148 and 49 more |
||
| #VU70444 - Server-Side Request Forgery (SSRF) CVE-2022-46364 |
CWE-918 | Medium | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 20.12.2022 |
SB2022122009 SB2023011329 SB2023011707 and 67 more |
||
| #VU68832 - Resource exhaustion CVE-2022-42004 |
CWE-400 | Medium | 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap | 31.10.2022 |
SB2022103116 SB2022103117 SB2022111404 and 122 more |
Showing elements 21 - 40 out of 24