Known vulnerabilities in eap7-jberet (Red Hat package)
Vendor:
Red Hat Inc.
Software:
eap7-jberet (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:eap7-jberet_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
8
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.2.4-3.Final_redhat_1.1.ep7.el6
1.2.4-3.Final_redhat_1.1.ep7.el7
1.2.1-1.Final_redhat_1.1.ep7.el6
1.2.1-1.Final_redhat_1.1.ep7.el7
1.3.9-3.SP3_redhat_00001.1.el9eap
1.3.9-3.SP3_redhat_00001.1.el8eap
1.3.9-3.SP3_redhat_00001.1.el7eap
1.3.9-1.Final_redhat_00001.1.el8eap
1.3.9-1.Final_redhat_00001.1.el7eap
1.3.9-1.Final_redhat_00001.1.el6eap
1.3.7-1.Final_redhat_00001.1.el7eap
1.3.7-1.Final_redhat_00001.1.el8eap
1.3.7-1.Final_redhat_00001.1.el6eap
1.3.5-1.Final_redhat_00001.1.el8eap
1.3.5-1.Final_redhat_00001.1.el7eap
1.3.5-1.Final_redhat_00001.1.el6eap
1.3.2-1.Final_redhat_00001.1.el7eap
1.3.2-1.Final_redhat_00001.1.el6eap
1.2.7-1.Final_redhat_00001.1.ep7.el7
1.2.7-1.Final_redhat_00001.1.ep7.el6
1.2.6-2.Final_redhat_1.1.ep7.el7
1.2.6-2.Final_redhat_1.1.ep7.el6
1.3.9-2.SP2_redhat_00001.1.el8eap
1.3.9-2.SP2_redhat_00001.1.el7eap
1.3.9-1.SP1_redhat_00001.1.el8eap
1.3.9-1.SP1_redhat_00001.1.el7eap
Vulnerabilities (8)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU88156 - Resource exhaustion CVE-2023-1973 |
CWE-400 | Medium | 1.3.9-3.SP3_redhat_00001.1.el7eap, 1.3.9-3.SP3_redhat_00001.1.el8eap, 1.3.9-3.SP3_redhat_00001.1.el9eap | 04.04.2024 |
SB2024040460 SB2024040537 SB2024040538 and 5 more |
||
| #VU88155 - Improper input validation CVE-2023-4639 |
CWE-20 | Medium | 1.3.9-3.SP3_redhat_00001.1.el7eap, 1.3.9-3.SP3_redhat_00001.1.el8eap, 1.3.9-3.SP3_redhat_00001.1.el9eap | 04.04.2024 |
SB2024040460 SB2024040537 SB2024040538 and 5 more |
||
| #VU88154 - Resource exhaustion CVE-2024-1635 |
CWE-400 | Medium | 1.3.9-3.SP3_redhat_00001.1.el7eap, 1.3.9-3.SP3_redhat_00001.1.el8eap, 1.3.9-3.SP3_redhat_00001.1.el9eap | 04.04.2024 |
SB2024040460 SB2024040537 SB2024040538 and 8 more |
||
| #VU84537 - Inadequate Encryption Strength CVE-2023-48795 |
CWE-326 | Low | 1.3.9-3.SP3_redhat_00001.1.el7eap, 1.3.9-3.SP3_redhat_00001.1.el8eap, 1.3.9-3.SP3_redhat_00001.1.el9eap | 19.12.2023 |
SB2023121903 SB2023121905 SB2023121906 and 343 more |
||
| #VU79114 - Resource exhaustion CVE-2023-3223 |
CWE-400 | Medium | 1.3.9-3.SP3_redhat_00001.1.el7eap, 1.3.9-3.SP3_redhat_00001.1.el8eap, 1.3.9-3.SP3_redhat_00001.1.el9eap | 08.08.2023 |
SB2023080810 SB2023080815 SB2023080816 and 12 more |
||
| #VU64152 - Deserialization of Untrusted Data CVE-2022-25647 |
CWE-502 | Medium | 1.3.9-2.SP2_redhat_00001.1.el7eap, 1.3.9-2.SP2_redhat_00001.1.el8eap | 10.06.2022 |
SB2021120221 SB2022061003 SB2022061421 and 94 more |
||
| #VU64030 - Resource exhaustion CVE-2021-44906 |
CWE-400 | High | 1.3.9-2.SP2_redhat_00001.1.el7eap, 1.3.9-2.SP2_redhat_00001.1.el8eap | 07.06.2022 |
SB2022060836 SB2022062103 SB2022062203 and 52 more |
||
| #VU62849 - Creation of Temporary File With Insecure Permissions CVE-2022-24823 |
CWE-378 | Low | 1.3.9-2.SP2_redhat_00001.1.el7eap, 1.3.9-2.SP2_redhat_00001.1.el8eap | 09.05.2022 |
SB2022050902 SB2022063002 SB2022072013 and 55 more |