Known vulnerabilities in eap7-undertow (Red Hat package) - page 3
Vendor:
Red Hat Inc.
Software:
eap7-undertow (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:eap7-undertow_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
79
Public exploits:
11
Known exploited (KEV):
4
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.4.18-21.SP19_redhat_00001.1.ep7.el7
2.0.41-8.SP9_redhat_00001.1.el7eap
1.4.18-19.SP17_redhat_00001.1.ep7.el7
2.0.41-7.SP8_redhat_00001.1.el7eap
2.2.39-1.Final_redhat_00001.1.el9eap
2.2.39-1.Final_redhat_00001.1.el8eap
2.2.39-1.Final_redhat_00001.1.el7eap
2.0.41-6.SP7_redhat_00001.1.el7eap
1.4.18-18.SP16_redhat_00001.1.ep7.el7
1.4.18-17.SP15_redhat_00001.1.ep7.el7
2.0.41-5.SP6_redhat_00001.1.el7eap
2.0.41-4.SP5_redhat_00001.1.el7eap
1.4.18-16.SP14_redhat_00001.1.ep7.el7
1.4.18-14.SP13_redhat_00001.1.ep7.el7
1.4.18-2.Final_redhat_2.1.ep7.el6
1.4.18-2.Final_redhat_2.1.ep7.el7
1.3.31-1.Final_redhat_1.1.ep7.el7
1.3.31-1.Final_redhat_1.1.ep7.el6
1.3.28-4.Final_redhat_4.1.ep7.el6
1.3.28-4.Final_redhat_4.1.ep7.el7
1.3.27-1.Final_redhat_1.1.ep7.el6
1.3.27-1.Final_redhat_1.1.ep7.el7
1.3.25-1.Final_redhat_1.1.ep7.el6
1.3.25-1.Final_redhat_1.1.ep7.el7
1.3.24-1.Final_redhat_1.1.ep7.el6
1.3.24-1.Final_redhat_1.1.ep7.el7
2.2.37-1.SP2_redhat_00001.1.el9eap
2.2.37-1.SP2_redhat_00001.1.el8eap
2.2.37-1.SP2_redhat_00001.1.el7eap
2.2.33-2.SP2_redhat_00001.1.el7eap
2.2.33-2.SP2_redhat_00001.1.el8eap
2.2.33-2.SP2_redhat_00001.1.el9eap
2.2.33-1.SP1_redhat_00001.1.el9eap
2.2.33-1.SP1_redhat_00001.1.el8eap
2.2.33-1.SP1_redhat_00001.1.el7eap
2.2.32-1.SP1_redhat_00001.1.el9eap
2.2.32-1.SP1_redhat_00001.1.el8eap
2.2.32-1.SP1_redhat_00001.1.el7eap
2.2.30-1.SP1_redhat_00001.1.el9eap
2.2.30-1.SP1_redhat_00001.1.el8eap
2.2.30-1.SP1_redhat_00001.1.el7eap
2.2.28-1.SP1_redhat_00001.1.el7eap
2.2.28-1.SP1_redhat_00001.1.el9eap
2.2.28-1.SP1_redhat_00001.1.el8eap
2.2.26-2.SP2_redhat_00001.1.el7eap
2.2.26-2.SP2_redhat_00001.1.el8eap
2.2.26-2.SP2_redhat_00001.1.el9eap
2.2.26-1.SP1_redhat_00001.1.el8eap
2.2.26-1.SP1_redhat_00001.1.el9eap
2.2.26-1.SP1_redhat_00001.1.el7eap
2.2.25-3.SP3_redhat_00001.1.el8eap
2.2.25-3.SP3_redhat_00001.1.el7eap
2.2.25-3.SP3_redhat_00001.1.el9eap
2.2.23-1.SP2_redhat_00001.1.el7eap
2.2.23-1.SP2_redhat_00001.1.el9eap
2.2.23-1.SP2_redhat_00001.1.el8eap
2.2.22-1.SP3_redhat_00002.1.el7eap
2.2.22-1.SP3_redhat_00002.1.el8eap
2.2.22-1.SP3_redhat_00002.1.el9eap
2.2.22-1.SP3_redhat_00001.1.el9eap
2.2.22-1.SP3_redhat_00001.1.el8eap
2.2.22-1.SP3_redhat_00001.1.el7eap
2.0.41-1.SP1_redhat_00001.1.el8eap
2.0.41-1.SP1_redhat_00001.1.el7eap
2.0.41-1.SP1_redhat_00001.1.el6eap
2.2.9-2.SP1_redhat_00001.1.el8eap
2.2.9-2.SP1_redhat_00001.1.el7eap
2.0.39-1.SP2_redhat_00001.1.el8eap
2.0.39-1.SP2_redhat_00001.1.el7eap
2.0.39-1.SP2_redhat_00001.1.el6eap
2.2.5-2.SP1_redhat_00001.1.el7eap
2.2.5-2.SP1_redhat_00001.1.el8eap
2.0.38-2.SP2_redhat_00001.1.el6eap
2.0.38-2.SP2_redhat_00001.1.el7eap
2.0.38-2.SP2_redhat_00001.1.el8eap
2.0.35-1.SP1_redhat_00001.1.el8eap
2.0.35-1.SP1_redhat_00001.1.el7eap
2.0.35-1.SP1_redhat_00001.1.el6eap
2.0.33-1.SP2_redhat_00001.1.el8eap
2.0.33-1.SP2_redhat_00001.1.el7eap
2.0.33-1.SP2_redhat_00001.1.el6eap
2.0.32-1.SP1_redhat_00001.1.el8eap
2.0.32-1.SP1_redhat_00001.1.el7eap
2.0.32-1.SP1_redhat_00001.1.el6eap
2.0.31-1.SP1_redhat_00001.1.el7eap
2.0.31-1.SP1_redhat_00001.1.el8eap
2.0.31-1.SP1_redhat_00001.1.el6eap
2.0.30-4.SP4_redhat_00001.1.el8eap
2.0.30-4.SP4_redhat_00001.1.el7eap
2.0.30-4.SP4_redhat_00001.1.el6eap
2.0.30-3.SP3_redhat_00001.1.el7eap
2.0.30-3.SP3_redhat_00001.1.el6eap
2.0.30-3.SP3_redhat_00001.1.el8eap
2.0.30-2.SP2_redhat_00001.1.el8eap
2.0.30-2.SP2_redhat_00001.1.el7eap
2.0.30-2.SP2_redhat_00001.1.el6eap
2.0.28-4.SP1_redhat_00002.1.el6eap
2.0.28-4.SP1_redhat_00002.1.el7eap
2.0.28-4.SP1_redhat_00002.1.el8eap
2.0.28-2.SP1_redhat_00001.1.el8eap
2.0.28-2.SP1_redhat_00001.1.el7eap
2.0.28-2.SP1_redhat_00001.1.el6eap
2.0.20-1.Final_redhat_00001.1.el8eap
2.0.20-1.Final_redhat_00001.1.el7eap
2.0.20-1.Final_redhat_00001.1.el6eap
2.0.19-1.Final_redhat_00001.1.el7eap
2.0.19-1.Final_redhat_00001.1.el6eap
1.4.18-10.SP11_redhat_00001.1.ep7.el7
1.4.18-10.SP11_redhat_00001.1.ep7.el6
1.4.18-7.SP8_redhat_1.1.ep7.el7
1.4.18-7.SP8_redhat_1.1.ep7.el6
1.4.18-4.SP2_redhat_1.1.ep7.el7
1.4.18-4.SP2_redhat_1.1.ep7.el6
2.2.13-1.SP2_redhat_00001.1.el7eap
1.3.31-3.Final_redhat_3.1.ep7.el7
1.3.31-3.Final_redhat_3.1.ep7.el6
2.2.20-1.SP1_redhat_00001.1.el7eap
2.2.20-1.SP1_redhat_00001.1.el9eap
2.2.20-1.SP1_redhat_00001.1.el8eap
2.2.19-1.SP2_redhat_00001.1.el8eap
2.2.19-1.SP2_redhat_00001.1.el7eap
2.2.19-1.SP2_redhat_00001.1.el9eap
2.2.18-2.SP2_redhat_00001.1.el8eap
2.2.18-2.SP2_redhat_00001.1.el7eap
2.2.17-2.SP4_redhat_00001.1.el8eap
2.2.17-2.SP4_redhat_00001.1.el7eap
2.2.16-1.Final_redhat_00001.1.el8eap
2.2.16-1.Final_redhat_00001.1.el7eap
2.2.13-1.SP2_redhat_00001.1.el8eap
2.0.41-2.SP2_redhat_00001.1.el6eap
2.0.41-2.SP2_redhat_00001.1.el7eap
2.0.41-2.SP2_redhat_00001.1.el8eap
Vulnerabilities (79)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU73219 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2023-1108 |
CWE-835 | Medium | 2.2.22-1.SP3_redhat_00002.1.el7eap, 2.2.22-1.SP3_redhat_00002.1.el8eap, 2.2.22-1.SP3_redhat_00002.1.el9eap, 2.2.23-1.SP2_redhat_00001.1.el7eap, 2.2.23-1.SP2_redhat_00001.1.el8eap, 2.2.23-1.SP2_redhat_00001.1.el9eap | 10.03.2023 |
SB2023031005 SB2023031008 SB2023031009 and 15 more |
||
| #VU71586 - Out-of-bounds write CVE-2022-40152 |
CWE-787 | Medium | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 26.01.2023 |
SB2023012669 SB2023012670 SB2023013124 and 52 more |
||
| #VU71109 - Out-of-bounds write CVE-2022-45693 |
CWE-787 | Medium | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 11.01.2023 |
SB2023011159 SB2023011160 SB2023013112 and 45 more |
||
| #VU70797 - Exposure of sensitive information to an unauthorized actor CVE-2022-45787 |
CWE-200 | Low | 2.2.23-1.SP2_redhat_00001.1.el7eap, 2.2.23-1.SP2_redhat_00001.1.el8eap, 2.2.23-1.SP2_redhat_00001.1.el9eap | 09.01.2023 |
SB2023010909 SB2023020878 SB2023031107 and 34 more |
||
| #VU70530 - Deserialization of Untrusted Data CVE-2022-45047 |
CWE-502 | High | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 28.12.2022 |
SB2022122828 SB2022122920 SB2023011148 and 49 more |
||
| #VU70444 - Server-Side Request Forgery (SSRF) CVE-2022-46364 |
CWE-918 | Medium | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 20.12.2022 |
SB2022122009 SB2023011329 SB2023011707 and 67 more |
||
| #VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-41881 |
CWE-835 | Medium | 2.2.23-1.SP2_redhat_00001.1.el7eap, 2.2.23-1.SP2_redhat_00001.1.el8eap, 2.2.23-1.SP2_redhat_00001.1.el9eap | 12.12.2022 |
SB2022121215 SB2023011210 SB2023011757 and 74 more |
||
| #VU69674 - Resource exhaustion CVE-2022-40150 |
CWE-400 | Medium | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 29.11.2022 |
SB2022112909 SB2022112941 SB2022121101 and 46 more |
||
| #VU68832 - Resource exhaustion CVE-2022-42004 |
CWE-400 | Medium | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 31.10.2022 |
SB2022103116 SB2022103117 SB2022111404 and 122 more |
||
| #VU68635 - Deserialization of Untrusted Data CVE-2022-42003 |
CWE-502 | Medium | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 25.10.2022 |
SB2022102509 SB2022102510 SB2022103117 and 208 more |
||
| #VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11023 |
CWE-79 | Low | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 05.05.2020 |
SB2020042126 SB2020052033 SB2020052103 and 180 more |
||
| #VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022 |
CWE-79 | Low | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 21.04.2020 |
SB2020042126 SB2020052033 SB2020052103 and 181 more |
||
| #VU21707 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2016-10735 |
CWE-79 | Low | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 10.10.2019 |
SB2019010911 SB2019101009 SB2020093090 and 21 more |
||
| #VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358 |
CWE-1321 | Low | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 28.03.2019 |
SB2019032804 SB2019041026 SB2019041801 and 155 more |
||
| #VU17694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-8331 |
CWE-79 | Low | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 14.02.2019 |
SB2019021412 SB2019031501 SB2019101009 and 28 more |
||
| #VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2015-9251 |
CWE-79 | Low | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 31.07.2018 |
SB2018080106 SB2019011705 SB2019100301 and 63 more |
||
| #VU13903 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-14041 |
CWE-79 | Low | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 18.07.2018 |
SB2018071803 SB2019031501 SB2023013124 and 8 more |
||
| #VU13902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-14042 |
CWE-79 | Low | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 18.07.2018 |
SB2018071803 SB2020093090 SB2020110508 and 22 more |
||
| #VU13901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2018-14040 |
CWE-79 | Low | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 17.07.2018 |
SB2018071803 SB2019031501 SB2020093090 and 24 more |
||
| #VU11300 - Resource exhaustion CVE-2017-18214 |
CWE-400 | Low | 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap | 28.03.2018 |
SB2017090813 SB2022022516 SB2022101031 and 8 more |
Showing elements 41 - 60 out of 79