Known vulnerabilities in jbcs-httpd24-mod_security (Red Hat package)
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-mod_security_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
128
Public exploits:
14
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.9.6-16.el7jbcs
2.9.6-16.el8jbcs
2.9.6-14.el7jbcs
2.9.6-14.el8jbcs
2.9.6-11.el7jbcs
2.9.6-11.el8jbcs
2.9.3-42.el7jbcs
2.9.3-42.el8jbcs
2.9.3-40.el7jbcs
2.9.3-40.el8jbcs
2.9.3-36.el7jbcs
2.9.3-36.el8jbcs
2.9.3-34.el7jbcs
2.9.3-34.el8jbcs
2.9.3-32.el7jbcs
2.9.3-32.el8jbcs
2.9.3-31.el7jbcs
2.9.3-31.el8jbcs
2.9.3-29.el7jbcs
2.9.3-29.el8jbcs
2.9.3-24.el7jbcs
2.9.3-24.el8jbcs
2.9.2-57.GA.jbcs.el6
2.9.2-57.GA.jbcs.el7
2.9.3-22.el7jbcs
2.9.3-22.el8jbcs
2.9.3-19.el7jbcs
2.9.3-19.el8jbcs
2.9.2-68.GA.jbcs.el7
2.9.2-68.GA.el8jbcs
2.9.2-67.GA.jbcs.el7
2.9.2-67.GA.el8jbcs
2.9.2-65.GA.jbcs.el7
2.9.2-65.GA.el8jbcs
2.9.2-63.GA.jbcs.el7
2.9.2-63.GA.el8jbcs
2.9.2-60.GA.jbcs.el7
2.9.2-58.GA.jbcs.el7
2.9.2-51.GA.jbcs.el6
2.9.2-51.GA.jbcs.el7
2.9.2-20.GA.jbcs.el6
2.9.2-20.GA.jbcs.el7
2.9.2-16.GA.jbcs.el6
2.9.2-16.GA.jbcs.el7
2.9.1-23.GA.jbcs.el7
2.9.1-23.GA.jbcs.el6
2.9.1-19.GA.jbcs.el7
2.9.1-19.GA.jbcs.el6
2.9.1-18.GA.jbcs.el6
2.9.1-18.GA.jbcs.el7
Vulnerabilities (128)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU93545 - Server-Side Request Forgery (SSRF) CVE-2024-39573 |
CWE-918 | Medium | 2.9.3-40.el7jbcs, 2.9.3-40.el8jbcs | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 46 more |
||
| #VU93544 - Improper input validation CVE-2024-38477 |
CWE-20 | Medium | 2.9.3-40.el7jbcs, 2.9.3-40.el8jbcs | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 58 more |
||
| #VU93543 - Server-Side Request Forgery (SSRF) CVE-2024-38476 |
CWE-918 | High | 2.9.3-40.el7jbcs, 2.9.3-40.el8jbcs | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 61 more |
||
| #VU93542 - Improper input validation CVE-2024-38475 |
CWE-20 | Critical | 2.9.3-40.el7jbcs, 2.9.3-40.el8jbcs | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 54 more |
||
| #VU93541 - Improper input validation CVE-2024-38474 |
CWE-20 | Medium | 2.9.3-40.el7jbcs, 2.9.3-40.el8jbcs | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 57 more |
||
| #VU93540 - Improper input validation CVE-2024-38473 |
CWE-20 | Medium | 2.9.3-40.el7jbcs, 2.9.3-40.el8jbcs | 01.07.2024 |
SB2024070155 SB20240702144 SB2024070402 and 47 more |
||
| #VU88153 - Resource exhaustion CVE-2024-27316 |
CWE-400 | Medium | 2.9.3-36.el7jbcs, 2.9.3-36.el8jbcs | 04.04.2024 |
SB2024040458 SB2024040502 SB2024040545 and 51 more |
||
| #VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-38709 |
CWE-113 | Medium | 2.9.3-42.el7jbcs, 2.9.3-42.el8jbcs | 04.04.2024 |
SB2024040458 SB2024040502 SB2024040903 and 64 more |
||
| #VU88144 - Improper input validation CVE-2024-28182 |
CWE-20 | Medium | 2.9.3-36.el7jbcs, 2.9.3-36.el8jbcs | 04.04.2024 |
SB2024040442 SB2024040443 SB2024040444 and 124 more |
||
| #VU87852 - Improper Validation of Certificate with Host Mismatch CVE-2024-2466 |
CWE-297 | Medium | 2.9.3-36.el7jbcs, 2.9.3-36.el8jbcs | 27.03.2024 |
SB2024032713 SB2024032748 SB2024061844 and 14 more |
||
| #VU87850 - Missing Release of Resource after Effective Lifetime CVE-2024-2398 |
CWE-772 | Medium | 2.9.3-36.el7jbcs, 2.9.3-36.el8jbcs | 27.03.2024 |
SB2024032713 SB2024032740 SB2024032744 and 106 more |
||
| #VU87848 - Improper Certificate Validation CVE-2024-2379 |
CWE-295 | Low | 2.9.3-36.el7jbcs, 2.9.3-36.el8jbcs | 27.03.2024 |
SB2024032713 SB2024032748 SB2024061844 and 12 more |
||
| #VU87846 - Improper input validation CVE-2024-2004 |
CWE-20 | Low | 2.9.3-36.el7jbcs, 2.9.3-36.el8jbcs | 27.03.2024 |
SB2024032713 SB2024032740 SB2024032748 and 28 more |
||
| #VU87679 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-6710 |
CWE-79 | Medium | 2.9.3-34.el7jbcs, 2.9.3-34.el8jbcs | 20.03.2024 |
SB2024032066 SB2024032068 SB2024032069 and 2 more |
||
| #VU83900 - Exposure of sensitive information to an unauthorized actor CVE-2023-46218 |
CWE-200 | Low | 2.9.3-34.el7jbcs, 2.9.3-34.el8jbcs | 06.12.2023 |
SB2023120612 SB2023120644 SB2023120661 and 87 more |
||
| #VU83899 - Missing Encryption of Sensitive Data CVE-2023-46219 |
CWE-311 | Medium | 2.9.3-34.el7jbcs, 2.9.3-34.el8jbcs | 06.12.2023 |
SB2023120612 SB2023120644 SB2023120661 and 31 more |
||
| #VU82894 - Resource Management Errors CVE-2023-5678 |
CWE-399 | Medium | 2.9.3-34.el7jbcs, 2.9.3-34.el8jbcs | 07.11.2023 |
SB20231107122 SB2023112047 SB2023112048 and 147 more |
||
| #VU82248 - Out-of-bounds read CVE-2023-31122 |
CWE-125 | Medium | 2.9.3-34.el7jbcs, 2.9.3-34.el8jbcs | 19.10.2023 |
SB2023101942 SB2023101960 SB2023102101 and 43 more |
||
| #VU81865 - Heap-based Buffer Overflow CVE-2023-38545 |
CWE-122 | High | 2.9.3-32.el7jbcs, 2.9.3-32.el8jbcs | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 99 more |
||
| #VU80732 - Resource exhaustion CVE-2023-38039 |
CWE-400 | Medium | 2.9.3-32.el7jbcs, 2.9.3-32.el8jbcs | 13.09.2023 |
SB2023091327 SB2023091363 SB2023091402 and 33 more |
Showing elements 1 - 20 out of 128