Known vulnerabilities in eap8-wss4j (Red Hat package)

Vendor: Red Hat Inc.

Software: eap8-wss4j (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:eap8-wss4j_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 7

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU117342 - Improper Control of Generation of Code ('Code Injection') CVE-2025-48913	CWE-94	Medium	No	No	3.0.4-1.redhat_00002.1.el8eap, 3.0.4-1.redhat_00002.1.el9eap	17.10.2025	SB2025101733 SB2025101736 SB2025102866 and 4 more
#VU114760 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-58056	CWE-444	Medium	No	No	3.0.4-1.redhat_00002.1.el8eap, 3.0.4-1.redhat_00002.1.el9eap	03.09.2025	SB2025090340 SB2025090949 SB20251008161 and 38 more
#VU114026 - Resource exhaustion CVE-2025-55163	CWE-400	Medium	No	No	3.0.4-1.redhat_00002.1.el8eap, 3.0.4-1.redhat_00002.1.el9eap	13.08.2025	SB2025081378 SB2025081948 SB2025081949 and 71 more
#VU92281 - Improper Authorization CVE-2023-6236	CWE-285	Low	No	No	3.0.1-2.redhat_00014.1.el8eap, 3.0.1-2.redhat_00014.1.el9eap	19.06.2024	SB2024061977 SB2024061978 SB2024061979 and 1 more
#VU92280 - Information Exposure Through Log Files CVE-2024-1102	CWE-532	Low	No	No	3.0.1-2.redhat_00014.1.el8eap, 3.0.1-2.redhat_00014.1.el9eap	19.06.2024	SB2024061963 SB2024061977 SB2024061978 and 1 more
#VU92251 - Server-Side Request Forgery (SSRF) CVE-2024-1233	CWE-918	Medium	No	No	3.0.1-2.redhat_00014.1.el8eap, 3.0.1-2.redhat_00014.1.el9eap	19.06.2024	SB2024061932 SB2024061933 SB2024061934 and 4 more
#VU83849 - Improper Access Control CVE-2023-4503	CWE-284	Medium	No	No	3.0.1-2.redhat_00014.1.el8eap, 3.0.1-2.redhat_00014.1.el9eap	04.12.2023	SB2023120447 SB2023120448 SB2023120449 and 4 more