Known vulnerabilities in eap8-parsson (Red Hat package)
Vendor:
Red Hat Inc.
Software:
eap8-parsson (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:eap8-parsson_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
6
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU119260 - Resource exhaustion CVE-2024-3884 |
CWE-400 | Medium | 1.1.7-3.redhat_00003.1.el8eap, 1.1.7-3.redhat_00003.1.el9eap | 08.12.2025 |
SB2025120817 SB2025120926 SB2025120927 and 13 more |
||
| #VU114059 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-4949 |
CWE-611 | High | 1.1.7-3.redhat_00003.1.el8eap, 1.1.7-3.redhat_00003.1.el9eap | 14.08.2025 |
SB2025081408 SB2025081409 SB2025081410 and 21 more |
||
| #VU85304 - Excessive Iteration CVE-2023-4043 |
CWE-834 | Medium | 1.1.5-1.redhat_00001.1.el8eap, 1.1.5-1.redhat_00001.1.el9eap | 11.01.2024 |
SB2024011123 SB2024012646 SB2024020506 and 15 more |
||
| #VU84537 - Inadequate Encryption Strength CVE-2023-48795 |
CWE-326 | Low | 1.1.5-1.redhat_00001.1.el8eap, 1.1.5-1.redhat_00001.1.el9eap | 19.12.2023 |
SB2023121903 SB2023121905 SB2023121906 and 343 more |
||
| #VU81948 - Improper Link Resolution Before File Access ('Link Following') CVE-2023-4759 |
CWE-59 | Medium | 1.1.5-1.redhat_00001.1.el8eap, 1.1.5-1.redhat_00001.1.el9eap | 12.10.2023 |
SB2023101242 SB2023101243 SB2023103012 and 21 more |
||
| #VU81427 - UNIX Symbolic Link (Symlink) Following CVE-2023-35887 |
CWE-61 | Low | 1.1.5-1.redhat_00001.1.el8eap, 1.1.5-1.redhat_00001.1.el9eap | 03.10.2023 |
SB2023100336 SB2023100337 SB2023100453 and 21 more |