Known vulnerabilities in eap7-resteasy (Red Hat package) - page 2

Vendor: Red Hat Inc.
Software: eap7-resteasy (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:eap7-resteasy_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 40
Public exploits: 11
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting eap7-resteasy (Red Hat package) eap7-resteasy (Red Hat package) is affected by 40 known vulnerabilities: 2 critical, 13 high, 20 medium, 5 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82197 - Resource exhaustion
CVE-2023-3171		 CWE-400 Medium
No
No
 3.15.8-1.Final_redhat_00001.1.el7eap, 3.15.8-1.Final_redhat_00001.1.el8eap, 3.15.8-1.Final_redhat_00001.1.el9eap 18.10.2023 SB2023101833
SB2023101834
SB2023101835
and 4 more
#VU81930 - Permissions, Privileges, and Access Controls
CVE-2023-4061		 CWE-264 Low
No
No
 3.15.8-1.Final_redhat_00001.1.el7eap, 3.15.8-1.Final_redhat_00001.1.el8eap, 3.15.8-1.Final_redhat_00001.1.el9eap 11.10.2023 SB2023101243
SB2023101833
SB2023101834
and 3 more
#VU80323 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-26136		 CWE-1321 High
No
No
 3.15.8-1.Final_redhat_00001.1.el7eap, 3.15.8-1.Final_redhat_00001.1.el8eap, 3.15.8-1.Final_redhat_00001.1.el9eap 04.09.2023 SB2023090411
SB2023090423
SB2023090816
and 42 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 3.15.8-1.Final_redhat_00001.1.el7eap, 3.15.8-1.Final_redhat_00001.1.el8eap, 3.15.8-1.Final_redhat_00001.1.el9eap 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 3.15.8-1.Final_redhat_00001.1.el7eap, 3.15.8-1.Final_redhat_00001.1.el8eap, 3.15.8-1.Final_redhat_00001.1.el9eap 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 3.15.8-1.Final_redhat_00001.1.el7eap, 3.15.8-1.Final_redhat_00001.1.el8eap, 3.15.8-1.Final_redhat_00001.1.el9eap 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU74182 - Improper Certificate Validation
CVE-2022-4492		 CWE-295 Medium
No
No
 3.15.5-1.Final_redhat_00001.1.el7eap, 3.15.5-1.Final_redhat_00001.1.el8eap, 3.15.5-1.Final_redhat_00001.1.el9eap 30.03.2023 SB2023033003
SB2023033004
SB2023033005
and 13 more
#VU73244 - Resource exhaustion
CVE-2023-26464		 CWE-400 Medium
No
No
 3.15.8-1.Final_redhat_00001.1.el7eap, 3.15.8-1.Final_redhat_00001.1.el8eap, 3.15.8-1.Final_redhat_00001.1.el9eap 10.03.2023 SB2023031040
SB2023032716
SB2023050514
and 22 more
#VU73219 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-1108		 CWE-835 Medium
No
No
 3.15.5-1.Final_redhat_00001.1.el7eap, 3.15.5-1.Final_redhat_00001.1.el8eap, 3.15.5-1.Final_redhat_00001.1.el9eap 10.03.2023 SB2023031005
SB2023031008
SB2023031009
and 15 more
#VU72075 - Insecure Temporary File
CVE-2023-0482		 CWE-377 Low
No
No
 3.15.5-1.Final_redhat_00001.1.el7eap, 3.15.5-1.Final_redhat_00001.1.el8eap, 3.15.5-1.Final_redhat_00001.1.el9eap 08.02.2023 SB2023020877
SB2023033003
SB2023033004
and 36 more
#VU70797 - Exposure of sensitive information to an unauthorized actor
CVE-2022-45787		 CWE-200 Low
No
No
 3.15.5-1.Final_redhat_00001.1.el7eap, 3.15.5-1.Final_redhat_00001.1.el8eap, 3.15.5-1.Final_redhat_00001.1.el9eap 09.01.2023 SB2023010909
SB2023020878
SB2023031107
and 34 more
#VU70524 - Out-of-bounds write
CVE-2022-41854		 CWE-787 Medium
No
No
 3.15.5-1.Final_redhat_00001.1.el7eap, 3.15.5-1.Final_redhat_00001.1.el8eap, 3.15.5-1.Final_redhat_00001.1.el9eap 28.12.2022 SB2022122813
SB2022122926
SB2023010417
and 52 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 3.0.27-1.Final_redhat_00001.1.ep7.el7, 3.11.6-1.Final_redhat_00001.1.el7eap, 3.15.5-1.Final_redhat_00001.1.el7eap, 3.15.5-1.Final_redhat_00001.1.el8eap, 3.15.5-1.Final_redhat_00001.1.el9eap 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 3.0.27-1.Final_redhat_00001.1.ep7.el7, 3.11.6-1.Final_redhat_00001.1.el7eap, 3.15.5-1.Final_redhat_00001.1.el7eap, 3.15.5-1.Final_redhat_00001.1.el8eap, 3.15.5-1.Final_redhat_00001.1.el9eap 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU69302 - Exposed Dangerous Method or Function
CVE-2022-41853		 CWE-749 High
Available
No
 3.15.5-1.Final_redhat_00001.1.el7eap, 3.15.5-1.Final_redhat_00001.1.el8eap, 3.15.5-1.Final_redhat_00001.1.el9eap 14.11.2022 SB2022111449
SB2022111450
SB2022111451
and 27 more
#VU67947 - Resource exhaustion
CVE-2022-1259		 CWE-400 Medium
No
No
 3.15.4-1.Final_redhat_00001.1.el7eap, 3.15.4-1.Final_redhat_00001.1.el8eap, 3.15.4-1.Final_redhat_00001.1.el9eap 05.10.2022 SB2022100552
SB2022100557
SB2022100558
and 4 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 3.15.4-1.Final_redhat_00001.1.el7eap, 3.15.4-1.Final_redhat_00001.1.el8eap, 3.15.4-1.Final_redhat_00001.1.el9eap 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU67664 - Stack-based buffer overflow
CVE-2022-38752		 CWE-121 Medium
No
No
 3.15.5-1.Final_redhat_00001.1.el7eap, 3.15.5-1.Final_redhat_00001.1.el8eap, 3.15.5-1.Final_redhat_00001.1.el9eap 27.09.2022 SB2022092715
SB2022092728
SB2022100555
and 66 more
#VU66672 - Resource exhaustion
CVE-2022-2053		 CWE-400 Medium
No
No
 3.15.4-1.Final_redhat_00001.1.el7eap, 3.15.4-1.Final_redhat_00001.1.el8eap, 3.15.4-1.Final_redhat_00001.1.el9eap 22.08.2022 SB2022082204
SB2022082205
SB2022100557
and 7 more
#VU58177 - Resource exhaustion
CVE-2021-3629		 CWE-400 Medium
No
No
 3.15.4-1.Final_redhat_00001.1.el8eap 16.11.2021 SB2021111607
SB2021111715
SB2022090932
and 5 more


Showing elements 21 - 40 out of 40