Known vulnerabilities in eap7-jboss-jsf (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
eap7-jboss-jsf (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:eap7-jboss-jsf_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
25
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
api_2.2_spec-2.2.13-4.redhat_1.1.ep7.el6
api_2.2_spec-2.2.13-4.redhat_1.1.ep7.el7
api_2.3_spec-3.0.0-8.SP08_redhat_00001.1.el9eap
api_2.3_spec-3.0.0-8.SP08_redhat_00001.1.el8eap
api_2.3_spec-3.0.0-8.SP08_redhat_00001.1.el7eap
api_2.3_spec-3.0.0-6.SP07_redhat_00001.1.el9eap
api_2.3_spec-3.0.0-6.SP07_redhat_00001.1.el8eap
api_2.3_spec-3.0.0-6.SP07_redhat_00001.1.el7eap
api_2.3_spec-2.3.5-7.SP2_redhat_00005.1.el8eap
api_2.3_spec-2.3.5-7.SP2_redhat_00005.1.el7eap
api_2.3_spec-2.3.5-7.SP2_redhat_00005.1.el6eap
api_2.3_spec-3.0.0-4.SP04_redhat_00001.1.el8eap
api_2.3_spec-3.0.0-4.SP04_redhat_00001.1.el7eap
api_2.3_spec-3.0.0-4.SP04_redhat_00001.1.el6eap
api_2.3_spec-3.0.0-3.SP02_redhat_00001.1.el7eap
api_2.3_spec-3.0.0-3.SP02_redhat_00001.1.el6eap
api_2.3_spec-3.0.0-3.SP02_redhat_00001.1.el8eap
api_2.3_spec-2.3.5-5.SP2_redhat_00003.1.el8eap
api_2.3_spec-2.3.5-5.SP2_redhat_00003.1.el7eap
api_2.3_spec-2.3.5-5.SP2_redhat_00003.1.el6eap
api_2.3_spec-2.3.5-3.SP2_redhat_00001.1.el8eap
api_2.3_spec-2.3.5-3.SP2_redhat_00001.1.el7eap
api_2.3_spec-2.3.5-3.SP2_redhat_00001.1.el6eap
api_2.3_spec-3.0.0-5.SP06_redhat_00001.1.el8eap
api_2.3_spec-3.0.0-5.SP06_redhat_00001.1.el7eap
api_2.3_spec-3.0.0-4.SP05_redhat_00002.1.el8eap
api_2.3_spec-3.0.0-4.SP05_redhat_00002.1.el7eap
Vulnerabilities (25)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU71713 - Observable discrepancy CVE-2022-3143 |
CWE-203 | Medium | api_2.3_spec-3.0.0-6.SP07_redhat_00001.1.el7eap, api_2.3_spec-3.0.0-6.SP07_redhat_00001.1.el8eap, api_2.3_spec-3.0.0-6.SP07_redhat_00001.1.el9eap | 31.01.2023 |
SB2023013123 SB2023013124 SB2023013125 and 3 more |
||
| #VU70444 - Server-Side Request Forgery (SSRF) CVE-2022-46364 |
CWE-918 | Medium | api_2.3_spec-3.0.0-6.SP07_redhat_00001.1.el7eap, api_2.3_spec-3.0.0-6.SP07_redhat_00001.1.el8eap, api_2.3_spec-3.0.0-6.SP07_redhat_00001.1.el9eap | 20.12.2022 |
SB2022122009 SB2023011329 SB2023011707 and 67 more |
||
| #VU64152 - Deserialization of Untrusted Data CVE-2022-25647 |
CWE-502 | Medium | api_2.3_spec-3.0.0-5.SP06_redhat_00001.1.el7eap, api_2.3_spec-3.0.0-5.SP06_redhat_00001.1.el8eap | 10.06.2022 |
SB2021120221 SB2022061003 SB2022061421 and 94 more |
||
| #VU64030 - Resource exhaustion CVE-2021-44906 |
CWE-400 | High | api_2.3_spec-3.0.0-5.SP06_redhat_00001.1.el7eap, api_2.3_spec-3.0.0-5.SP06_redhat_00001.1.el8eap | 07.06.2022 |
SB2022060836 SB2022062103 SB2022062203 and 52 more |
||
| #VU62849 - Creation of Temporary File With Insecure Permissions CVE-2022-24823 |
CWE-378 | Low | api_2.3_spec-3.0.0-5.SP06_redhat_00001.1.el7eap, api_2.3_spec-3.0.0-5.SP06_redhat_00001.1.el8eap | 09.05.2022 |
SB2022050902 SB2022063002 SB2022072013 and 55 more |
Showing elements 21 - 40 out of 25