Known vulnerabilities in jbcs-httpd24-mod_proxy_cluster (Red Hat package)
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-mod_proxy_cluster_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
88
Public exploits:
8
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.3.22-9.el7jbcs
1.3.22-9.el8jbcs
1.3.22-7.el7jbcs
1.3.22-7.el8jbcs
1.3.22-4.el7jbcs
1.3.22-4.el8jbcs
1.3.20-10.el7jbcs
1.3.20-10.el8jbcs
1.3.20-8.el7jbcs
1.3.20-8.el8jbcs
1.3.20-4.el7jbcs
1.3.20-4.el8jbcs
1.3.20-3.el7jbcs
1.3.20-3.el8jbcs
1.3.19-7.el7jbcs
1.3.19-7.el8jbcs
1.3.19-6.el7jbcs
1.3.19-6.el8jbcs
1.3.19-4.el7jbcs
1.3.19-4.el8jbcs
1.3.18-2.el7jbcs
1.3.18-2.el8jbcs
1.3.17-13.el7jbcs
1.3.17-13.el8jbcs
1.3.17-9.el7jbcs
1.3.17-9.el8jbcs
Vulnerabilities (88)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU93545 - Server-Side Request Forgery (SSRF) CVE-2024-39573 |
CWE-918 | Medium | 1.3.20-8.el7jbcs, 1.3.20-8.el8jbcs | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 46 more |
||
| #VU93544 - Improper input validation CVE-2024-38477 |
CWE-20 | Medium | 1.3.20-8.el7jbcs, 1.3.20-8.el8jbcs | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 58 more |
||
| #VU93543 - Server-Side Request Forgery (SSRF) CVE-2024-38476 |
CWE-918 | High | 1.3.20-8.el7jbcs, 1.3.20-8.el8jbcs | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 61 more |
||
| #VU93542 - Improper input validation CVE-2024-38475 |
CWE-20 | Critical | 1.3.20-8.el7jbcs, 1.3.20-8.el8jbcs | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 54 more |
||
| #VU93541 - Improper input validation CVE-2024-38474 |
CWE-20 | Medium | 1.3.20-8.el7jbcs, 1.3.20-8.el8jbcs | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 57 more |
||
| #VU93540 - Improper input validation CVE-2024-38473 |
CWE-20 | Medium | 1.3.20-8.el7jbcs, 1.3.20-8.el8jbcs | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 47 more |
||
| #VU88153 - Resource exhaustion CVE-2024-27316 |
CWE-400 | Medium | 1.3.20-4.el7jbcs, 1.3.20-4.el8jbcs | 04.04.2024 |
SB2024040458 SB2024040502 SB2024040545 and 51 more |
||
| #VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-38709 |
CWE-113 | Medium | 1.3.20-10.el7jbcs, 1.3.20-10.el8jbcs | 04.04.2024 |
SB2024040458 SB2024040502 SB2024040903 and 64 more |
||
| #VU88144 - Improper input validation CVE-2024-28182 |
CWE-20 | Medium | 1.3.20-4.el7jbcs, 1.3.20-4.el8jbcs | 04.04.2024 |
SB2024040442 SB2024040443 SB2024040444 and 124 more |
||
| #VU87852 - Improper Validation of Certificate with Host Mismatch CVE-2024-2466 |
CWE-297 | Medium | 1.3.20-4.el7jbcs, 1.3.20-4.el8jbcs | 27.03.2024 |
SB2024032713 SB2024032748 SB2024061844 and 14 more |
||
| #VU87850 - Missing Release of Resource after Effective Lifetime CVE-2024-2398 |
CWE-772 | Medium | 1.3.20-4.el7jbcs, 1.3.20-4.el8jbcs | 27.03.2024 |
SB2024032713 SB2024032740 SB2024032744 and 106 more |
||
| #VU87848 - Improper Certificate Validation CVE-2024-2379 |
CWE-295 | Low | 1.3.20-4.el7jbcs, 1.3.20-4.el8jbcs | 27.03.2024 |
SB2024032713 SB2024032748 SB2024061844 and 12 more |
||
| #VU87846 - Improper input validation CVE-2024-2004 |
CWE-20 | Low | 1.3.20-4.el7jbcs, 1.3.20-4.el8jbcs | 27.03.2024 |
SB2024032713 SB2024032740 SB2024032748 and 28 more |
||
| #VU87679 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-6710 |
CWE-79 | Medium | 1.3.20-3.el7jbcs, 1.3.20-3.el8jbcs | 20.03.2024 |
SB2024032066 SB2024032068 SB2024032069 and 2 more |
||
| #VU83900 - Exposure of sensitive information to an unauthorized actor CVE-2023-46218 |
CWE-200 | Low | 1.3.20-3.el7jbcs, 1.3.20-3.el8jbcs | 06.12.2023 |
SB2023120612 SB2023120644 SB2023120661 and 87 more |
||
| #VU83899 - Missing Encryption of Sensitive Data CVE-2023-46219 |
CWE-311 | Medium | 1.3.20-3.el7jbcs, 1.3.20-3.el8jbcs | 06.12.2023 |
SB2023120612 SB2023120644 SB2023120661 and 31 more |
||
| #VU82894 - Resource Management Errors CVE-2023-5678 |
CWE-399 | Medium | 1.3.20-3.el7jbcs, 1.3.20-3.el8jbcs | 07.11.2023 |
SB20231107122 SB2023112047 SB2023112048 and 147 more |
||
| #VU82248 - Out-of-bounds read CVE-2023-31122 |
CWE-125 | Medium | 1.3.20-3.el7jbcs, 1.3.20-3.el8jbcs | 19.10.2023 |
SB2023101942 SB2023101960 SB2023102101 and 43 more |
||
| #VU76651 - Resource Management Errors CVE-2023-2650 |
CWE-399 | Medium | 1.3.19-7.el7jbcs, 1.3.19-7.el8jbcs | 30.05.2023 |
SB2023053040 SB2023053044 SB2023053045 and 131 more |
||
| #VU74148 - Improper Verification of Cryptographic Signature CVE-2023-0465 |
CWE-347 | Low | 1.3.19-7.el7jbcs, 1.3.19-7.el8jbcs | 28.03.2023 |
SB2023032241 SB2023040666 SB2023040730 and 100 more |
Showing elements 1 - 20 out of 88