Known vulnerabilities in eap7-wildfly (Red Hat package) - page 3

Software CPE: cpe:2.3:o:red_hat:eap7-wildfly_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 107
Public exploits: 19
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting eap7-wildfly (Red Hat package) eap7-wildfly (Red Hat package) is affected by 107 known vulnerabilities: 2 critical, 20 high, 59 medium, 26 low Critical High Medium Low

Vulnerabilities (107)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96052 - Resource exhaustion
CVE-2024-5971
CWE-400 Medium
No
No
7.4.18-1.GA_redhat_00001.1.el7eap, 7.4.18-1.GA_redhat_00001.1.el8eap, 7.4.18-1.GA_redhat_00001.1.el9eap 15.08.2024 SB2024081548
SB2024082312
SB2024082313
and 11 more
#VU96051 - Resource exhaustion
CVE-2024-3653
CWE-400 Medium
No
No
7.4.18-1.GA_redhat_00001.1.el7eap, 7.4.18-1.GA_redhat_00001.1.el8eap, 7.4.18-1.GA_redhat_00001.1.el9eap 15.08.2024 SB2024081548
SB2024082312
SB2024082313
and 4 more
#VU92405 - Uncontrolled Memory Allocation
CVE-2024-4068
CWE-789 Medium
No
No
7.4.19-1.GA_redhat_00002.1.el7eap, 7.4.19-1.GA_redhat_00002.1.el8eap, 7.4.19-1.GA_redhat_00002.1.el9eap 20.06.2024 SB20240620121
SB2024062833
SB2024070809
and 51 more
#VU92251 - Server-Side Request Forgery (SSRF)
CVE-2024-1233
CWE-918 Medium
No
No
7.4.17-2.GA_redhat_00002.1.el7eap, 7.4.17-2.GA_redhat_00002.1.el8eap, 7.4.17-2.GA_redhat_00002.1.el9eap 19.06.2024 SB2024061932
SB2024061933
SB2024061934
and 4 more
#VU89919 - Allocation of Resources Without Limits or Throttling
CVE-2024-4029
CWE-770 Low
No
No
7.4.19-1.GA_redhat_00002.1.el7eap, 7.4.19-1.GA_redhat_00002.1.el8eap, 7.4.19-1.GA_redhat_00002.1.el9eap 30.05.2024 SB2024053024
SB2024101587
SB2024101588
and 5 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172
CWE-835 Medium
No
No
7.4.18-1.GA_redhat_00001.1.el7eap, 7.4.18-1.GA_redhat_00001.1.el8eap, 7.4.18-1.GA_redhat_00001.1.el9eap 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89219 - Observable discrepancy
CVE-2024-30171
CWE-203 Medium
No
No
7.4.18-1.GA_redhat_00001.1.el7eap, 7.4.18-1.GA_redhat_00001.1.el8eap, 7.4.18-1.GA_redhat_00001.1.el9eap 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU89218 - Resource exhaustion
CVE-2024-29857
CWE-400 Medium
No
No
7.4.18-1.GA_redhat_00001.1.el7eap, 7.4.18-1.GA_redhat_00001.1.el8eap, 7.4.18-1.GA_redhat_00001.1.el9eap 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU88173 - Resource exhaustion
CVE-2023-51775
CWE-400 Medium
No
No
7.4.19-1.GA_redhat_00002.1.el7eap, 7.4.19-1.GA_redhat_00002.1.el8eap, 7.4.19-1.GA_redhat_00002.1.el9eap 05.04.2024 SB2024040525
SB2024041129
SB2024041130
and 83 more
#VU88156 - Resource exhaustion
CVE-2023-1973
CWE-400 Medium
No
No
7.4.16-4.GA_redhat_00002.1.el7eap, 7.4.16-4.GA_redhat_00002.1.el8eap, 7.4.16-4.GA_redhat_00002.1.el9eap 04.04.2024 SB2024040460
SB2024040537
SB2024040538
and 5 more
#VU88155 - Improper input validation
CVE-2023-4639
CWE-20 Medium
No
No
7.4.16-4.GA_redhat_00002.1.el7eap, 7.4.16-4.GA_redhat_00002.1.el8eap, 7.4.16-4.GA_redhat_00002.1.el9eap 04.04.2024 SB2024040460
SB2024040537
SB2024040538
and 5 more
#VU88153 - Resource exhaustion
CVE-2024-27316
CWE-400 Medium
Available
No
7.4.18-1.GA_redhat_00001.1.el7eap, 7.4.18-1.GA_redhat_00001.1.el8eap, 7.4.18-1.GA_redhat_00001.1.el9eap 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025
CWE-200 Medium
No
No
7.4.18-1.GA_redhat_00001.1.el7eap, 7.4.18-1.GA_redhat_00001.1.el8eap, 7.4.18-1.GA_redhat_00001.1.el9eap 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Available
No
7.4.15-6.GA_redhat_00003.1.el7eap, 7.4.15-6.GA_redhat_00003.1.el8eap, 7.4.15-6.GA_redhat_00003.1.el9eap, 7.4.16-4.GA_redhat_00002.1.el7eap, 7.4.16-4.GA_redhat_00002.1.el8eap, 7.4.16-4.GA_redhat_00002.1.el9eap 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 344 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033
CWE-79 Low
No
No
7.4.19-1.GA_redhat_00002.1.el7eap, 7.4.19-1.GA_redhat_00002.1.el8eap, 7.4.19-1.GA_redhat_00002.1.el9eap 25.08.2022 SB2022082508
SB2022101893
SB2022111644
and 44 more
#VU61938 - Deserialization of Untrusted Data
CVE-2022-23221
CWE-502 High
No
No
7.1.8-2.GA_redhat_00002.1.ep7.el7, 7.3.11-4.GA_redhat_00002.1.el7eap 06.04.2022 SB2022040618
SB2022040619
SB2022042260
and 7 more
#VU60621 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-23445
CWE-79 Low
No
No
7.4.17-2.GA_redhat_00002.1.el7eap, 7.4.17-2.GA_redhat_00002.1.el8eap, 7.4.17-2.GA_redhat_00002.1.el9eap 15.02.2022 SB2021092717
SB2022021511
SB2022080802
and 11 more
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493
CWE-502 High
No
No
7.3.11-4.GA_redhat_00002.1.el7eap, 7.4.4-3.GA_redhat_00011.1.el7eap, 7.4.4-3.GA_redhat_00011.1.el8eap 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU49086 - Comparison using wrong factors
CVE-2020-28052
CWE-1025 High
Available
No
7.1.8-2.GA_redhat_00002.1.ep7.el7 18.12.2020 SB2020121801
SB2021031707
SB2021042112
and 16 more
#VU25353 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-7238
CWE-444 Medium
No
No
7.1.8-2.GA_redhat_00002.1.ep7.el7 14.02.2020 SB2020021409
SB2020022521
SB2020022601
and 17 more


Showing elements 41 - 60 out of 107