Known vulnerabilities in eap7-jboss-xnio-base (Red Hat package)

Vendor: Red Hat Inc.
Software: eap7-jboss-xnio-base (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:eap7-jboss-xnio-base_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 44
Public exploits: 8
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting eap7-jboss-xnio-base (Red Hat package) eap7-jboss-xnio-base (Red Hat package) is affected by 44 known vulnerabilities: 1 critical, 10 high, 28 medium, 5 low Critical High Medium Low

Vulnerabilities (44)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98024 - Improper input validation
CVE-2024-47561		 CWE-20 High
No
No
 3.5.10-1.Final_redhat_00001.1.ep7.el7, 3.7.13-1.Final_redhat_00001.1.el7eap 03.10.2024 SB2024100351
SB2024100504
SB2024100984
and 36 more
#VU96052 - Resource exhaustion
CVE-2024-5971		 CWE-400 Medium
No
No
 3.8.16-1.Final_redhat_00001.1.el7eap, 3.8.16-1.Final_redhat_00001.1.el8eap, 3.8.16-1.Final_redhat_00001.1.el9eap 15.08.2024 SB2024081548
SB2024082312
SB2024082313
and 11 more
#VU96051 - Resource exhaustion
CVE-2024-3653		 CWE-400 Medium
No
No
 3.8.16-1.Final_redhat_00001.1.el7eap, 3.8.16-1.Final_redhat_00001.1.el8eap, 3.8.16-1.Final_redhat_00001.1.el9eap 15.08.2024 SB2024081548
SB2024082312
SB2024082313
and 4 more
#VU93103 - Resource exhaustion
CVE-2023-5685		 CWE-400 Medium
No
No
 3.5.10-1.Final_redhat_00001.1.ep7.el7, 3.7.13-1.Final_redhat_00001.1.el7eap 24.06.2024 SB2024062414
SB2024062415
SB2024062425
and 14 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172		 CWE-835 Medium
No
No
 3.8.16-1.Final_redhat_00001.1.el7eap, 3.8.16-1.Final_redhat_00001.1.el8eap, 3.8.16-1.Final_redhat_00001.1.el9eap 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89219 - Observable discrepancy
CVE-2024-30171		 CWE-203 Medium
No
No
 3.8.16-1.Final_redhat_00001.1.el7eap, 3.8.16-1.Final_redhat_00001.1.el8eap, 3.8.16-1.Final_redhat_00001.1.el9eap 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 3.8.16-1.Final_redhat_00001.1.el7eap, 3.8.16-1.Final_redhat_00001.1.el8eap, 3.8.16-1.Final_redhat_00001.1.el9eap 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU88153 - Resource exhaustion
CVE-2024-27316		 CWE-400 Medium
Available
No
 3.8.16-1.Final_redhat_00001.1.el7eap, 3.8.16-1.Final_redhat_00001.1.el8eap, 3.8.16-1.Final_redhat_00001.1.el9eap 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 3.8.16-1.Final_redhat_00001.1.el7eap, 3.8.16-1.Final_redhat_00001.1.el8eap, 3.8.16-1.Final_redhat_00001.1.el9eap 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU87567 - Server-Side Request Forgery (SSRF)
CVE-2024-28752		 CWE-918 Medium
No
No
 3.5.10-1.Final_redhat_00001.1.ep7.el7, 3.7.13-1.Final_redhat_00001.1.el7eap 15.03.2024 SB2024031529
SB2024042254
SB2024052706
and 20 more
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364		 CWE-918 Medium
No
No
 3.5.10-1.Final_redhat_00001.1.ep7.el7, 3.7.13-1.Final_redhat_00001.1.el7eap 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU69302 - Exposed Dangerous Method or Function
CVE-2022-41853		 CWE-749 High
Available
No
 3.5.10-1.Final_redhat_00001.1.ep7.el7, 3.7.13-1.Final_redhat_00001.1.el7eap 14.11.2022 SB2022111449
SB2022111450
SB2022111451
and 27 more
#VU65495 - Improper input validation
CVE-2022-34169		 CWE-20 High
Available
No
 3.5.10-1.Final_redhat_00001.1.ep7.el7, 3.7.13-1.Final_redhat_00001.1.el7eap 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU61938 - Deserialization of Untrusted Data
CVE-2022-23221		 CWE-502 High
No
No
 3.5.10-1.Final_redhat_00001.1.ep7.el7, 3.7.13-1.Final_redhat_00001.1.el7eap 06.04.2022 SB2022040618
SB2022040619
SB2022042260
and 7 more
#VU60243 - Resource Management Errors
CVE-2021-3859		 CWE-399 Medium
No
No
 3.7.13-1.Final_redhat_00001.1.el7eap 02.02.2022 SB2022020210
SB2022020326
SB2022020327
and 4 more
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493		 CWE-502 High
No
No
 3.7.13-1.Final_redhat_00001.1.el7eap, 3.8.6-1.Final_redhat_00001.1.el7eap, 3.8.6-1.Final_redhat_00001.1.el8eap 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 3.7.13-1.Final_redhat_00001.1.el7eap, 3.8.6-1.Final_redhat_00001.1.el7eap, 3.8.6-1.Final_redhat_00001.1.el8eap 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 3.7.13-1.Final_redhat_00001.1.el7eap, 3.8.6-1.Final_redhat_00001.1.el7eap, 3.8.6-1.Final_redhat_00001.1.el8eap 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU49086 - Comparison using wrong factors
CVE-2020-28052		 CWE-1025 High
Available
No
 3.5.10-1.Final_redhat_00001.1.ep7.el7 18.12.2020 SB2020121801
SB2021031707
SB2021042112
and 16 more
#VU25353 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-7238		 CWE-444 Medium
No
No
 3.5.10-1.Final_redhat_00001.1.ep7.el7 14.02.2020 SB2020021409
SB2020022521
SB2020022601
and 16 more


Showing elements 1 - 20 out of 44