Known vulnerabilities in eap7-wildfly (Red Hat package) - page 2

Vendor: Red Hat Inc.
Software: eap7-wildfly (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:eap7-wildfly_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 107
Public exploits: 19
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting eap7-wildfly (Red Hat package) eap7-wildfly (Red Hat package) is affected by 107 known vulnerabilities: 2 critical, 20 high, 59 medium, 26 low Critical High Medium Low

Vulnerabilities (107)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101867 - Creation of Temporary File With Insecure Permissions
CVE-2024-51127		 CWE-378 Low
No
No
 7.4.21-2.GA_redhat_00001.1.el7eap, 7.4.21-2.GA_redhat_00001.1.el8eap, 7.4.21-2.GA_redhat_00001.1.el9eap 19.12.2024 SB2024121931
SB2025011664
SB2025021825
and 4 more
#VU98024 - Improper input validation
CVE-2024-47561		 CWE-20 High
No
No
 7.1.8-2.GA_redhat_00002.1.ep7.el7, 7.3.11-4.GA_redhat_00002.1.el7eap 03.10.2024 SB2024100351
SB2024100504
SB2024100984
and 36 more
#VU93103 - Resource exhaustion
CVE-2023-5685		 CWE-400 Medium
No
No
 7.1.8-2.GA_redhat_00002.1.ep7.el7, 7.3.11-4.GA_redhat_00002.1.el7eap 24.06.2024 SB2024062414
SB2024062415
SB2024062425
and 14 more
#VU87567 - Server-Side Request Forgery (SSRF)
CVE-2024-28752		 CWE-918 Medium
No
No
 7.1.8-2.GA_redhat_00002.1.ep7.el7, 7.3.11-4.GA_redhat_00002.1.el7eap, 7.4.17-2.GA_redhat_00002.1.el7eap, 7.4.17-2.GA_redhat_00002.1.el8eap, 7.4.17-2.GA_redhat_00002.1.el9eap 15.03.2024 SB2024031529
SB2024042254
SB2024052706
and 20 more
#VU83219 - Deserialization of Untrusted Data
CVE-2023-39410		 CWE-502 Medium
No
No
 7.1.8-2.GA_redhat_00002.1.ep7.el7, 7.3.11-4.GA_redhat_00002.1.el7eap, 7.4.14-5.GA_redhat_00002.1.el7eap, 7.4.14-5.GA_redhat_00002.1.el8eap, 7.4.14-5.GA_redhat_00002.1.el9eap 16.11.2023 SB2023111614
SB2023112014
SB2023112410
and 43 more
#VU82197 - Resource exhaustion
CVE-2023-3171		 CWE-400 Medium
No
No
 7.1.8-2.GA_redhat_00002.1.ep7.el7, 7.3.11-4.GA_redhat_00002.1.el7eap, 7.4.13-8.GA_redhat_00001.1.el7eap, 7.4.13-8.GA_redhat_00001.1.el8eap, 7.4.13-8.GA_redhat_00001.1.el9eap 18.10.2023 SB2023101833
SB2023101834
SB2023101835
and 4 more
#VU73244 - Resource exhaustion
CVE-2023-26464		 CWE-400 Medium
No
No
 7.1.8-2.GA_redhat_00002.1.ep7.el7, 7.3.11-4.GA_redhat_00002.1.el7eap, 7.4.13-8.GA_redhat_00001.1.el7eap, 7.4.13-8.GA_redhat_00001.1.el8eap, 7.4.13-8.GA_redhat_00001.1.el9eap 10.03.2023 SB2023031040
SB2023032716
SB2023050514
and 22 more
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364		 CWE-918 Medium
No
No
 7.1.8-2.GA_redhat_00002.1.ep7.el7, 7.3.11-4.GA_redhat_00002.1.el7eap, 7.4.9-4.GA_redhat_00003.1.el7eap, 7.4.9-4.GA_redhat_00003.1.el8eap, 7.4.9-4.GA_redhat_00003.1.el9eap 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU69302 - Exposed Dangerous Method or Function
CVE-2022-41853		 CWE-749 High
Available
No
 7.1.8-2.GA_redhat_00002.1.ep7.el7, 7.3.11-4.GA_redhat_00002.1.el7eap, 7.4.10-6.GA_redhat_00002.1.el7eap, 7.4.10-6.GA_redhat_00002.1.el8eap, 7.4.10-6.GA_redhat_00002.1.el9eap 14.11.2022 SB2022111449
SB2022111450
SB2022111451
and 27 more
#VU65495 - Improper input validation
CVE-2022-34169		 CWE-20 High
Available
No
 7.1.8-2.GA_redhat_00002.1.ep7.el7, 7.3.11-4.GA_redhat_00002.1.el7eap, 7.4.19-1.GA_redhat_00002.1.el7eap, 7.4.19-1.GA_redhat_00002.1.el8eap, 7.4.19-1.GA_redhat_00002.1.el9eap 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU60243 - Resource Management Errors
CVE-2021-3859		 CWE-399 Medium
No
No
 7.3.11-4.GA_redhat_00002.1.el7eap 02.02.2022 SB2022020210
SB2022020326
SB2022020327
and 4 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 7.3.11-4.GA_redhat_00002.1.el7eap, 7.4.4-3.GA_redhat_00011.1.el7eap, 7.4.4-3.GA_redhat_00011.1.el8eap 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 7.3.11-4.GA_redhat_00002.1.el7eap, 7.4.4-3.GA_redhat_00011.1.el7eap, 7.4.4-3.GA_redhat_00011.1.el8eap 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU58178 - Files or Directories Accessible to External Parties
CVE-2021-3717		 CWE-552 Low
No
No
 7.1.9-2.GA_redhat_00002.1.ep7.el7 16.11.2021 SB2021111608
SB2021111715
SB2022080830
and 3 more
#VU26494 - Deserialization of Untrusted Data
CVE-2020-10673		 CWE-502 High
Available
No
 7.1.9-2.GA_redhat_00002.1.ep7.el7 01.04.2020 SB2020030909
SB2020073033
SB2022060909
and 17 more
#VU26493 - Deserialization of Untrusted Data
CVE-2020-10672		 CWE-502 High
No
No
 7.1.9-2.GA_redhat_00002.1.ep7.el7 01.04.2020 SB2020030909
SB2020073033
SB2022060909
and 16 more
#VU25832 - Deserialization of Untrusted Data
CVE-2020-9548		 CWE-502 High
Available
No
 7.1.9-2.GA_redhat_00002.1.ep7.el7 09.03.2020 SB2020030909
SB2020073033
SB2022060909
and 14 more
#VU25831 - Deserialization of Untrusted Data
CVE-2020-9547		 CWE-502 High
Available
No
 7.1.9-2.GA_redhat_00002.1.ep7.el7 09.03.2020 SB2020030909
SB2020073033
SB2022060909
and 13 more
#VU25830 - Deserialization of Untrusted Data
CVE-2020-9546		 CWE-502 High
No
No
 7.1.9-2.GA_redhat_00002.1.ep7.el7 09.03.2020 SB2020030909
SB2020071523
SB2020071620
and 31 more
#VU25469 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8840		 CWE-94 Medium
Available
No
 7.1.9-2.GA_redhat_00002.1.ep7.el7 19.02.2020 SB2020021921
SB2020022615
SB2020061106
and 18 more


Showing elements 21 - 40 out of 107