Known vulnerabilities in eap8-netty (Red Hat package)
Vendor:
Red Hat Inc.
Software:
eap8-netty (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:eap8-netty_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
11
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
4.1.130-1.Final_redhat_00001.1.el9eap
4.1.127-1.Final_redhat_00001.1.el8eap
4.1.127-1.Final_redhat_00001.1.el9eap
4.1.119-1.Final_redhat_00002.1.el8eap
4.1.119-1.Final_redhat_00002.1.el9eap
4.1.114-1.Final_redhat_00001.1.el9eap
4.1.114-1.Final_redhat_00001.1.el8eap
4.1.100-2.Final_redhat_00001.1.el9eap
4.1.100-2.Final_redhat_00001.1.el8eap
Vulnerabilities (11)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU117342 - Improper Control of Generation of Code ('Code Injection') CVE-2025-48913 |
CWE-94 | Medium | 4.1.127-1.Final_redhat_00001.1.el8eap, 4.1.127-1.Final_redhat_00001.1.el9eap | 17.10.2025 |
SB2025101733 SB2025101736 SB2025102866 and 4 more |
||
| #VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-58056 |
CWE-444 | Medium | 4.1.127-1.Final_redhat_00001.1.el8eap, 4.1.127-1.Final_redhat_00001.1.el9eap | 03.09.2025 |
SB2025090340 SB2025090949 SB20251008161 and 38 more |
||
| #VU114026 - Resource exhaustion CVE-2025-55163 |
CWE-400 | Medium | 4.1.127-1.Final_redhat_00001.1.el8eap, 4.1.127-1.Final_redhat_00001.1.el9eap | 13.08.2025 |
SB2025081378 SB2025081948 SB2025081949 and 71 more |
||
| #VU106934 - Resource Management Errors CVE-2024-8447 |
CWE-399 | Medium | 4.1.119-1.Final_redhat_00002.1.el8eap, 4.1.119-1.Final_redhat_00002.1.el9eap | 03.04.2025 |
SB2025040338 SB2025040341 |
||
| #VU103770 - Improper input validation CVE-2025-24970 |
CWE-20 | Medium | 4.1.119-1.Final_redhat_00002.1.el8eap, 4.1.119-1.Final_redhat_00002.1.el9eap | 11.02.2025 |
SB2025021186 SB202502197190 SB2025030409 and 88 more |
||
| #VU103769 - Resource exhaustion CVE-2025-25193 |
CWE-400 | Low | 4.1.119-1.Final_redhat_00002.1.el8eap, 4.1.119-1.Final_redhat_00002.1.el9eap | 11.02.2025 |
SB2025021186 SB202502197190 SB2025030409 and 56 more |
||
| #VU100259 - Resource Management Errors CVE-2024-47535 |
CWE-399 | Low | 4.1.119-1.Final_redhat_00002.1.el8eap, 4.1.119-1.Final_redhat_00002.1.el9eap | 12.11.2024 |
SB2024111299 SB2024122313 SB2025012061 and 79 more |
||
| #VU92281 - Improper Authorization CVE-2023-6236 |
CWE-285 | Low | 4.1.100-2.Final_redhat_00001.1.el8eap, 4.1.100-2.Final_redhat_00001.1.el9eap | 19.06.2024 |
SB2024061977 SB2024061978 SB2024061979 and 1 more |
||
| #VU92280 - Information Exposure Through Log Files CVE-2024-1102 |
CWE-532 | Low | 4.1.100-2.Final_redhat_00001.1.el8eap, 4.1.100-2.Final_redhat_00001.1.el9eap | 19.06.2024 |
SB2024061963 SB2024061977 SB2024061978 and 1 more |
||
| #VU92251 - Server-Side Request Forgery (SSRF) CVE-2024-1233 |
CWE-918 | Medium | 4.1.100-2.Final_redhat_00001.1.el8eap, 4.1.100-2.Final_redhat_00001.1.el9eap | 19.06.2024 |
SB2024061932 SB2024061933 SB2024061934 and 4 more |
||
| #VU83849 - Improper Access Control CVE-2023-4503 |
CWE-284 | Medium | 4.1.100-2.Final_redhat_00001.1.el8eap, 4.1.100-2.Final_redhat_00001.1.el9eap | 04.12.2023 |
SB2023120447 SB2023120448 SB2023120449 and 4 more |