Known vulnerabilities in eap7-jackson-databind (Red Hat package) - page 2

Vendor: Red Hat Inc.
Software: eap7-jackson-databind (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:eap7-jackson-databind_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 51
Public exploits: 16
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting eap7-jackson-databind (Red Hat package) eap7-jackson-databind (Red Hat package) is affected by 51 known vulnerabilities: 2 critical, 16 high, 20 medium, 13 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98024 - Improper input validation
CVE-2024-47561		 CWE-20 High
No
No
 2.8.11.6-1.SP1_redhat_00001.1.ep7.el7 03.10.2024 SB2024100351
SB2024100504
SB2024100984
and 36 more
#VU93103 - Resource exhaustion
CVE-2023-5685		 CWE-400 Medium
No
No
 2.8.11.6-1.SP1_redhat_00001.1.ep7.el7 24.06.2024 SB2024062414
SB2024062415
SB2024062425
and 14 more
#VU87567 - Server-Side Request Forgery (SSRF)
CVE-2024-28752		 CWE-918 Medium
No
No
 2.8.11.6-1.SP1_redhat_00001.1.ep7.el7 15.03.2024 SB2024031529
SB2024042254
SB2024052706
and 20 more
#VU83219 - Deserialization of Untrusted Data
CVE-2023-39410		 CWE-502 Medium
No
No
 2.8.11.6-1.SP1_redhat_00001.1.ep7.el7 16.11.2023 SB2023111614
SB2023112014
SB2023112410
and 43 more
#VU82197 - Resource exhaustion
CVE-2023-3171		 CWE-400 Medium
No
No
 2.8.11.6-1.SP1_redhat_00001.1.ep7.el7 18.10.2023 SB2023101833
SB2023101834
SB2023101835
and 4 more
#VU73244 - Resource exhaustion
CVE-2023-26464		 CWE-400 Medium
No
No
 2.8.11.6-1.SP1_redhat_00001.1.ep7.el7 10.03.2023 SB2023031040
SB2023032716
SB2023050514
and 22 more
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364		 CWE-918 Medium
No
No
 2.8.11.6-1.SP1_redhat_00001.1.ep7.el7, 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU69302 - Exposed Dangerous Method or Function
CVE-2022-41853		 CWE-749 High
Available
No
 2.8.11.6-1.SP1_redhat_00001.1.ep7.el7 14.11.2022 SB2022111449
SB2022111450
SB2022111451
and 27 more
#VU65495 - Improper input validation
CVE-2022-34169		 CWE-20 High
Available
No
 2.8.11.6-1.SP1_redhat_00001.1.ep7.el7 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU61938 - Deserialization of Untrusted Data
CVE-2022-23221		 CWE-502 High
No
No
 2.8.11.6-1.SP1_redhat_00001.1.ep7.el7 06.04.2022 SB2022040618
SB2022040619
SB2022042260
and 7 more
#VU49086 - Comparison using wrong factors
CVE-2020-28052		 CWE-1025 High
Available
No
 2.8.11.6-1.SP1_redhat_00001.1.ep7.el7 18.12.2020 SB2020121801
SB2021031707
SB2021042112
and 16 more
#VU25831 - Deserialization of Untrusted Data
CVE-2020-9547		 CWE-502 High
Available
No
 2.8.11.6-2.SP1_redhat_00002.1.ep7.el7 09.03.2020 SB2020030909
SB2020073033
SB2022060909
and 13 more
#VU25830 - Deserialization of Untrusted Data
CVE-2020-9546		 CWE-502 High
No
No
 2.8.11.6-2.SP1_redhat_00002.1.ep7.el7 09.03.2020 SB2020030909
SB2020071523
SB2020071620
and 31 more
#VU25469 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8840		 CWE-94 Medium
Available
No
 2.8.11.6-2.SP1_redhat_00002.1.ep7.el7 19.02.2020 SB2020021921
SB2020022615
SB2020061106
and 18 more
#VU25353 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-7238		 CWE-444 Medium
No
No
 2.8.11.6-1.SP1_redhat_00001.1.ep7.el7 14.02.2020 SB2020021409
SB2020022521
SB2020022601
and 17 more
#VU21707 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-10735		 CWE-79 Low
No
No
 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap 10.10.2019 SB2019010911
SB2019101009
SB2020093090
and 21 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251		 CWE-79 Low
No
No
 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more
#VU13903 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14041		 CWE-79 Low
No
No
 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap 18.07.2018 SB2018071803
SB2019031501
SB2023013124
and 8 more
#VU13901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14040		 CWE-79 Low
No
No
 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap 17.07.2018 SB2018071803
SB2019031501
SB2020093090
and 24 more
#VU11300 - Resource exhaustion
CVE-2017-18214		 CWE-400 Low
No
No
 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap 28.03.2018 SB2017090813
SB2022022516
SB2022101031
and 8 more


Showing elements 21 - 40 out of 51