Known vulnerabilities in eap7-wildfly-elytron (Red Hat package)

Vendor: Red Hat Inc.
Software: eap7-wildfly-elytron (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:eap7-wildfly-elytron_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 57
Public exploits: 7
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting eap7-wildfly-elytron (Red Hat package) eap7-wildfly-elytron (Red Hat package) is affected by 57 known vulnerabilities: 1 critical, 6 high, 34 medium, 16 low Critical High Medium Low

Vulnerabilities (57)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106929 - Improper Access Control
CVE-2025-23367		 CWE-284 Medium
No
No
 1.15.25-1.Final_redhat_00001.1.el7eap, 1.15.25-1.Final_redhat_00001.1.el8eap, 1.15.25-1.Final_redhat_00001.1.el9eap 03.04.2025 SB2025040321
SB2025040329
SB2025050938
and 3 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 1.15.25-1.Final_redhat_00001.1.el7eap, 1.15.25-1.Final_redhat_00001.1.el8eap, 1.15.25-1.Final_redhat_00001.1.el9eap 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU103769 - Resource exhaustion
CVE-2025-25193		 CWE-400 Low
No
No
 1.15.25-1.Final_redhat_00001.1.el7eap, 1.15.25-1.Final_redhat_00001.1.el8eap, 1.15.25-1.Final_redhat_00001.1.el9eap 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 56 more
#VU100259 - Resource Management Errors
CVE-2024-47535		 CWE-399 Low
No
No
 1.15.25-1.Final_redhat_00001.1.el7eap, 1.15.25-1.Final_redhat_00001.1.el8eap, 1.15.25-1.Final_redhat_00001.1.el9eap 12.11.2024 SB2024111299
SB2024122313
SB2025012061
and 79 more
#VU92251 - Server-Side Request Forgery (SSRF)
CVE-2024-1233		 CWE-918 Medium
No
No
 1.15.23-2.Final_redhat_00001.1.el7eap, 1.15.23-2.Final_redhat_00001.1.el8eap, 1.15.23-2.Final_redhat_00001.1.el9eap 19.06.2024 SB2024061932
SB2024061933
SB2024061934
and 4 more
#VU88156 - Resource exhaustion
CVE-2023-1973		 CWE-400 Medium
No
No
 1.15.22-1.Final_redhat_00001.1.el7eap, 1.15.22-1.Final_redhat_00001.1.el8eap, 1.15.22-1.Final_redhat_00001.1.el9eap 04.04.2024 SB2024040460
SB2024040537
SB2024040538
and 5 more
#VU88155 - Improper input validation
CVE-2023-4639		 CWE-20 Medium
No
No
 1.15.22-1.Final_redhat_00001.1.el7eap, 1.15.22-1.Final_redhat_00001.1.el8eap, 1.15.22-1.Final_redhat_00001.1.el9eap 04.04.2024 SB2024040460
SB2024040537
SB2024040538
and 5 more
#VU88154 - Resource exhaustion
CVE-2024-1635		 CWE-400 Medium
No
No
 1.15.22-1.Final_redhat_00001.1.el7eap, 1.15.22-1.Final_redhat_00001.1.el8eap, 1.15.22-1.Final_redhat_00001.1.el9eap 04.04.2024 SB2024040460
SB2024040537
SB2024040538
and 8 more
#VU87567 - Server-Side Request Forgery (SSRF)
CVE-2024-28752		 CWE-918 Medium
No
No
 1.15.23-2.Final_redhat_00001.1.el7eap, 1.15.23-2.Final_redhat_00001.1.el8eap, 1.15.23-2.Final_redhat_00001.1.el9eap 15.03.2024 SB2024031529
SB2024042254
SB2024052706
and 20 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 1.15.22-1.Final_redhat_00001.1.el7eap, 1.15.22-1.Final_redhat_00001.1.el8eap, 1.15.22-1.Final_redhat_00001.1.el9eap 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483		 CWE-532 Medium
No
No
 1.15.21-1.Final_redhat_00001.1.el7eap, 1.15.21-1.Final_redhat_00001.1.el8eap, 1.15.21-1.Final_redhat_00001.1.el9eap 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU82197 - Resource exhaustion
CVE-2023-3171		 CWE-400 Medium
No
No
 1.15.20-1.Final_redhat_00001.1.el7eap, 1.15.20-1.Final_redhat_00001.1.el8eap, 1.15.20-1.Final_redhat_00001.1.el9eap 18.10.2023 SB2023101833
SB2023101834
SB2023101835
and 4 more
#VU81948 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-4759		 CWE-59 Medium
No
No
 1.15.21-1.Final_redhat_00001.1.el7eap, 1.15.21-1.Final_redhat_00001.1.el8eap, 1.15.21-1.Final_redhat_00001.1.el9eap 12.10.2023 SB2023101242
SB2023101243
SB2023103012
and 21 more
#VU81930 - Permissions, Privileges, and Access Controls
CVE-2023-4061		 CWE-264 Low
No
No
 1.15.20-1.Final_redhat_00001.1.el7eap, 1.15.20-1.Final_redhat_00001.1.el8eap, 1.15.20-1.Final_redhat_00001.1.el9eap 11.10.2023 SB2023101243
SB2023101833
SB2023101834
and 3 more
#VU80323 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2023-26136		 CWE-1321 High
No
No
 1.15.20-1.Final_redhat_00001.1.el7eap, 1.15.20-1.Final_redhat_00001.1.el8eap, 1.15.20-1.Final_redhat_00001.1.el9eap 04.09.2023 SB2023090411
SB2023090423
SB2023090816
and 42 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883		 CWE-185 Medium
No
No
 1.15.20-1.Final_redhat_00001.1.el7eap, 1.15.20-1.Final_redhat_00001.1.el8eap, 1.15.20-1.Final_redhat_00001.1.el9eap 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 1.15.20-1.Final_redhat_00001.1.el7eap, 1.15.20-1.Final_redhat_00001.1.el8eap, 1.15.20-1.Final_redhat_00001.1.el9eap 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 1.15.20-1.Final_redhat_00001.1.el7eap, 1.15.20-1.Final_redhat_00001.1.el8eap, 1.15.20-1.Final_redhat_00001.1.el9eap 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU73244 - Resource exhaustion
CVE-2023-26464		 CWE-400 Medium
No
No
 1.15.20-1.Final_redhat_00001.1.el7eap, 1.15.20-1.Final_redhat_00001.1.el8eap, 1.15.20-1.Final_redhat_00001.1.el9eap 10.03.2023 SB2023031040
SB2023032716
SB2023050514
and 22 more
#VU60621 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-23445		 CWE-79 Low
No
No
 1.15.23-2.Final_redhat_00001.1.el7eap, 1.15.23-2.Final_redhat_00001.1.el8eap, 1.15.23-2.Final_redhat_00001.1.el9eap 15.02.2022 SB2021092717
SB2022021511
SB2022080802
and 11 more


Showing elements 1 - 20 out of 57