Known vulnerabilities in jbcs-httpd24-openssl-pkcs11 (Red Hat package)
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-openssl-pkcs11_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
105
Public exploits:
10
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
0.4.12-5.el7jbcs
0.4.10-35.el7jbcs
0.4.10-35.el8jbcs
0.4.10-34.el7jbcs
0.4.10-34.el8jbcs
0.4.10-33.el7jbcs
0.4.10-33.el8jbcs
0.4.10-32.el7jbcs
0.4.10-32.el8jbcs
0.4.10-31.el7jbcs
0.4.10-31.el8jbcs
0.4.10-26.jbcs.el7
0.4.10-26.el8jbcs
0.4.10-22.jbcs.el7
0.4.10-22.el8jbcs
0.4.10-20.el8jbcs
0.4.10-20.jbcs.el7
0.4.10-18.jbcs.el7
0.4.10-7.jbcs.el7
Vulnerabilities (105)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU87679 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-6710 |
CWE-79 | Medium | 0.4.10-35.el7jbcs, 0.4.10-35.el8jbcs | 20.03.2024 |
SB2024032066 SB2024032068 SB2024032069 and 2 more |
||
| #VU83900 - Exposure of sensitive information to an unauthorized actor CVE-2023-46218 |
CWE-200 | Low | 0.4.10-35.el7jbcs, 0.4.10-35.el8jbcs | 06.12.2023 |
SB2023120612 SB2023120644 SB2023120661 and 87 more |
||
| #VU83899 - Missing Encryption of Sensitive Data CVE-2023-46219 |
CWE-311 | Medium | 0.4.10-35.el7jbcs, 0.4.10-35.el8jbcs | 06.12.2023 |
SB2023120612 SB2023120644 SB2023120661 and 31 more |
||
| #VU82894 - Resource Management Errors CVE-2023-5678 |
CWE-399 | Medium | 0.4.10-35.el7jbcs, 0.4.10-35.el8jbcs | 07.11.2023 |
SB20231107122 SB2023112047 SB2023112048 and 147 more |
||
| #VU82248 - Out-of-bounds read CVE-2023-31122 |
CWE-125 | Medium | 0.4.10-35.el7jbcs, 0.4.10-35.el8jbcs | 19.10.2023 |
SB2023101942 SB2023101960 SB2023102101 and 43 more |
||
| #VU82245 - Resource Management Errors CVE-2023-45802 |
CWE-399 | Medium | 0.4.10-34.el7jbcs, 0.4.10-34.el8jbcs | 19.10.2023 |
SB2023101942 SB2023101960 SB2023102104 and 37 more |
||
| #VU81865 - Heap-based Buffer Overflow CVE-2023-38545 |
CWE-122 | High | 0.4.10-34.el7jbcs, 0.4.10-34.el8jbcs | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 99 more |
||
| #VU81863 - External Control of File Name or Path CVE-2023-38546 |
CWE-73 | Low | 0.4.10-34.el7jbcs, 0.4.10-34.el8jbcs | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 125 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 0.4.10-34.el7jbcs, 0.4.10-34.el8jbcs | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 651 more |
||
| #VU80760 - Exposure of sensitive information to an unauthorized actor CVE-2023-41081 |
CWE-200 | Medium | 0.4.10-34.el7jbcs, 0.4.10-34.el8jbcs | 13.09.2023 |
SB2023091361 SB2023101769 SB2023120738 and 6 more |
||
| #VU80732 - Resource exhaustion CVE-2023-38039 |
CWE-400 | Medium | 0.4.10-34.el7jbcs, 0.4.10-34.el8jbcs | 13.09.2023 |
SB2023091327 SB2023091363 SB2023091402 and 33 more |
||
| #VU78798 - Resource Management Errors CVE-2023-3817 |
CWE-399 | Low | 0.4.10-34.el7jbcs, 0.4.10-34.el8jbcs | 31.07.2023 |
SB2023073153 SB2023080268 SB2023080438 and 158 more |
||
| #VU78463 - Resource Management Errors CVE-2023-3446 |
CWE-399 | Medium | 0.4.10-34.el7jbcs, 0.4.10-34.el8jbcs | 20.07.2023 |
SB2023072079 SB2023072524 SB2023072525 and 152 more |
||
| #VU76651 - Resource Management Errors CVE-2023-2650 |
CWE-399 | Medium | 0.4.10-34.el7jbcs, 0.4.10-34.el8jbcs | 30.05.2023 |
SB2023053040 SB2023053044 SB2023053045 and 131 more |
||
| #VU74149 - Security Features CVE-2023-0466 |
CWE-254 | Low | 0.4.10-34.el7jbcs, 0.4.10-34.el8jbcs | 28.03.2023 |
SB2023032241 SB2023040666 SB2023040730 and 86 more |
||
| #VU74148 - Improper Verification of Cryptographic Signature CVE-2023-0465 |
CWE-347 | Low | 0.4.10-34.el7jbcs, 0.4.10-34.el8jbcs | 28.03.2023 |
SB2023032241 SB2023040666 SB2023040730 and 100 more |
||
| #VU73960 - Resource exhaustion CVE-2023-0464 |
CWE-400 | Medium | 0.4.10-34.el7jbcs, 0.4.10-34.el8jbcs | 22.03.2023 |
SB2023032241 SB2023033057 SB2023033058 and 100 more |
||
| #VU71996 - Double Free CVE-2022-4450 |
CWE-415 | Medium | 0.4.10-33.el7jbcs, 0.4.10-33.el8jbcs | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020771 and 180 more |
||
| #VU71993 - Information Exposure Through Timing Discrepancy CVE-2022-4304 |
CWE-208 | Medium | 0.4.10-33.el7jbcs, 0.4.10-33.el8jbcs | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020767 and 222 more |
||
| #VU71241 - Memory corruption CVE-2006-20001 |
CWE-119 | Medium | 0.4.10-33.el7jbcs, 0.4.10-33.el8jbcs | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 28 more |
Showing elements 1 - 20 out of 105