Known vulnerabilities in eap8-log4j (Red Hat package)
Vendor:
Red Hat Inc.
Software:
eap8-log4j (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:eap8-log4j_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
10
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU97630 - Missing release of memory after effective lifetime CVE-2024-41172 |
CWE-401 | Medium | 2.22.1-1.redhat_00002.1.el8eap, 2.22.1-1.redhat_00002.1.el9eap | 20.09.2024 |
SB2024091810 SB2024092018 SB2024100250 and 5 more |
||
| #VU97622 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2024-8883 |
CWE-601 | Low | 2.22.1-1.redhat_00002.1.el8eap, 2.22.1-1.redhat_00002.1.el9eap | 20.09.2024 |
SB2024092009 SB2024092069 SB2024092070 and 12 more |
||
| #VU97621 - Improper Verification of Cryptographic Signature CVE-2024-8698 |
CWE-347 | Medium | 2.22.1-1.redhat_00002.1.el8eap, 2.22.1-1.redhat_00002.1.el9eap | 20.09.2024 |
SB2024092009 SB2024092069 SB2024092070 and 11 more |
||
| #VU89919 - Allocation of Resources Without Limits or Throttling CVE-2024-4029 |
CWE-770 | Low | 2.22.1-1.redhat_00002.1.el8eap, 2.22.1-1.redhat_00002.1.el9eap | 30.05.2024 |
SB2024053024 SB2024101587 SB2024101588 and 5 more |
||
| #VU87615 - Resource exhaustion CVE-2023-52428 |
CWE-400 | Medium | 2.22.1-1.redhat_00002.1.el8eap, 2.22.1-1.redhat_00002.1.el9eap | 19.03.2024 |
SB2024031924 SB2024040107 SB2024041643 and 43 more |
||
| #VU85304 - Excessive Iteration CVE-2023-4043 |
CWE-834 | Medium | 2.19.0-2.redhat_00001.1.el8eap, 2.19.0-2.redhat_00001.1.el9eap | 11.01.2024 |
SB2024011123 SB2024012646 SB2024020506 and 15 more |
||
| #VU84537 - Inadequate Encryption Strength CVE-2023-48795 |
CWE-326 | Low | 2.19.0-2.redhat_00001.1.el8eap, 2.19.0-2.redhat_00001.1.el9eap | 19.12.2023 |
SB2023121903 SB2023121905 SB2023121906 and 343 more |
||
| #VU81948 - Improper Link Resolution Before File Access ('Link Following') CVE-2023-4759 |
CWE-59 | Medium | 2.19.0-2.redhat_00001.1.el8eap, 2.19.0-2.redhat_00001.1.el9eap | 12.10.2023 |
SB2023101242 SB2023101243 SB2023103012 and 21 more |
||
| #VU81427 - UNIX Symbolic Link (Symlink) Following CVE-2023-35887 |
CWE-61 | Low | 2.19.0-2.redhat_00001.1.el8eap, 2.19.0-2.redhat_00001.1.el9eap | 03.10.2023 |
SB2023100336 SB2023100337 SB2023100453 and 21 more |
||
| #VU65495 - Improper input validation CVE-2022-34169 |
CWE-20 | High | 2.22.1-1.redhat_00002.1.el8eap, 2.22.1-1.redhat_00002.1.el9eap | 20.07.2022 |
SB2022072046 SB2022072047 SB2022072140 and 137 more |