Known vulnerabilities in eap8-hibernate (Red Hat package)

Known vulnerabilities in eap8-hibernate (Red Hat package)

Vendor: Red Hat Inc.

Software: eap8-hibernate (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:eap8-hibernate_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 15

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (15)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU121145 - Improper Neutralization of HTTP Headers for Scripting Syntax CVE-2025-12543	CWE-644	Medium	No	No	6.6.36-1.Final_redhat_00001.1.el8eap, 6.6.36-1.Final_redhat_00001.1.el9eap	10.01.2026	SB2026011002 SB2026021723 SB2026021724 and 9 more
#VU119260 - Resource exhaustion CVE-2024-3884	CWE-400	Medium	No	No	6.2.46-1.Final_redhat_00001.1.el8eap, 6.2.46-1.Final_redhat_00001.1.el9eap, 6.6.36-1.Final_redhat_00001.1.el8eap, 6.6.36-1.Final_redhat_00001.1.el9eap	08.12.2025	SB2025120817 SB2025120926 SB2025120927 and 13 more
#VU118734 - Resource exhaustion CVE-2025-9784	CWE-400	Medium	No	No	6.6.36-1.Final_redhat_00001.1.el8eap, 6.6.36-1.Final_redhat_00001.1.el9eap	24.11.2025	SB2024121157 SB2025121162 SB2026021723 and 3 more
#VU114059 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-4949	CWE-611	High	No	No	6.2.46-1.Final_redhat_00001.1.el8eap, 6.2.46-1.Final_redhat_00001.1.el9eap, 6.6.31-1.Final_redhat_00001.1.el9eap	14.08.2025	SB2025081408 SB2025081409 SB2025081410 and 21 more
#VU105112 - Resource exhaustion CVE-2025-23184	CWE-400	Medium	No	No	6.6.36-1.Final_redhat_00001.1.el8eap, 6.6.36-1.Final_redhat_00001.1.el9eap	28.02.2025	SB2025022807 SB2025030340 SB2025041017 and 40 more
#VU97630 - Missing release of memory after effective lifetime CVE-2024-41172	CWE-401	Medium	No	No	6.2.31-1.Final_redhat_00002.1.el8eap, 6.2.31-1.Final_redhat_00002.1.el9eap	20.09.2024	SB2024091810 SB2024092018 SB2024100250 and 5 more
#VU97622 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2024-8883	CWE-601	Low	No	No	6.2.31-1.Final_redhat_00002.1.el8eap, 6.2.31-1.Final_redhat_00002.1.el9eap	20.09.2024	SB2024092009 SB2024092069 SB2024092070 and 12 more
#VU97621 - Improper Verification of Cryptographic Signature CVE-2024-8698	CWE-347	Medium	Available	No	6.2.31-1.Final_redhat_00002.1.el8eap, 6.2.31-1.Final_redhat_00002.1.el9eap	20.09.2024	SB2024092009 SB2024092069 SB2024092070 and 11 more
#VU92281 - Improper Authorization CVE-2023-6236	CWE-285	Low	No	No	6.2.18-1.Final_redhat_00001.1.el8eap, 6.2.18-1.Final_redhat_00001.1.el9eap	19.06.2024	SB2024061977 SB2024061978 SB2024061979 and 1 more
#VU92280 - Information Exposure Through Log Files CVE-2024-1102	CWE-532	Low	No	No	6.2.18-1.Final_redhat_00001.1.el8eap, 6.2.18-1.Final_redhat_00001.1.el9eap	19.06.2024	SB2024061963 SB2024061977 SB2024061978 and 1 more
#VU92251 - Server-Side Request Forgery (SSRF) CVE-2024-1233	CWE-918	Medium	No	No	6.2.18-1.Final_redhat_00001.1.el8eap, 6.2.18-1.Final_redhat_00001.1.el9eap	19.06.2024	SB2024061932 SB2024061933 SB2024061934 and 4 more
#VU89919 - Allocation of Resources Without Limits or Throttling CVE-2024-4029	CWE-770	Low	No	No	6.2.31-1.Final_redhat_00002.1.el8eap, 6.2.31-1.Final_redhat_00002.1.el9eap	30.05.2024	SB2024053024 SB2024101587 SB2024101588 and 5 more
#VU87615 - Resource exhaustion CVE-2023-52428	CWE-400	Medium	No	No	6.2.31-1.Final_redhat_00002.1.el8eap, 6.2.31-1.Final_redhat_00002.1.el9eap	19.03.2024	SB2024031924 SB2024040107 SB2024041643 and 43 more
#VU83849 - Improper Access Control CVE-2023-4503	CWE-284	Medium	No	No	6.2.18-1.Final_redhat_00001.1.el8eap, 6.2.18-1.Final_redhat_00001.1.el9eap	04.12.2023	SB2023120447 SB2023120448 SB2023120449 and 4 more
#VU65495 - Improper input validation CVE-2022-34169	CWE-20	High	Available	No	6.2.31-1.Final_redhat_00002.1.el8eap, 6.2.31-1.Final_redhat_00002.1.el9eap	20.07.2022	SB2022072046 SB2022072047 SB2022072140 and 137 more