Known vulnerabilities in JBoss Core Services

Vendor: Red Hat Inc.
Software: JBoss Core Services
Software CPE: cpe:2.3:a:red_hat:jboss_core_services:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 157
Public exploits: 19
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Core Services JBoss Core Services is affected by 157 known vulnerabilities: 1 critical, 33 high, 96 medium, 27 low Critical High Medium Low

Vulnerabilities (157)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU104099 - Use After Free
CVE-2024-56171		 CWE-416 High
No
No
 2.4.62 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU104098 - Stack-based buffer overflow
CVE-2025-24928		 CWE-121 High
No
No
 2.4.62 20.02.2025 SB2025022003
SB2025022010
SB2025022023
and 111 more
#VU96897 - Buffer Underwrite ('Buffer Underflow')
CVE-2024-45490		 CWE-124 High
No
No
 2.4.62 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 113 more
#VU94503 - Server-Side Request Forgery (SSRF)
CVE-2024-40898		 CWE-918 High
Available
No
 2.4.57 SP6 17.07.2024 SB20240717136
SB2024071896
SB2024081362
and 13 more
#VU93545 - Server-Side Request Forgery (SSRF)
CVE-2024-39573		 CWE-918 Medium
No
No
 2.4.57 SP5 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 46 more
#VU93544 - Improper input validation
CVE-2024-38477		 CWE-20 Medium
No
No
 2.4.57 SP5 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 58 more
#VU93543 - Server-Side Request Forgery (SSRF)
CVE-2024-38476		 CWE-918 High
No
No
 2.4.57 SP5 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 61 more
#VU93542 - Improper input validation
CVE-2024-38475		 CWE-20 Critical
Available
No
 2.4.57 SP5 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU93541 - Improper input validation
CVE-2024-38474		 CWE-20 Medium
No
No
 2.4.57 SP5 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 57 more
#VU93540 - Improper input validation
CVE-2024-38473		 CWE-20 Medium
Available
No
 2.4.57 SP5 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 47 more
#VU93539 - Server-Side Request Forgery (SSRF)
CVE-2024-38472		 CWE-918 Medium
Available
No
 2.4.57 SP6 01.07.2024 SB2024070155
SB20240702144
SB2024081362
and 11 more
#VU93538 - NULL Pointer Dereference
CVE-2024-36387		 CWE-476 Medium
No
No
 2.4.62 01.07.2024 SB2024070155
SB20240702144
SB2024070890
and 18 more
#VU93424 - Out-of-bounds read
CVE-2024-5535		 CWE-125 Low
Available
No
 2.4.62 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more
#VU88153 - Resource exhaustion
CVE-2024-27316		 CWE-400 Medium
Available
No
 2.4.57 SP4 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709		 CWE-113 Medium
No
No
 2.4.57 SP6 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 64 more
#VU87852 - Improper Validation of Certificate with Host Mismatch
CVE-2024-2466		 CWE-297 Medium
No
No
 2.4.57 SP4 27.03.2024 SB2024032713
SB2024032748
SB2024061844
and 14 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 2.4.57 SP4 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87848 - Improper Certificate Validation
CVE-2024-2379		 CWE-295 Low
No
No
 2.4.57 SP4 27.03.2024 SB2024032713
SB2024032748
SB2024061844
and 12 more
#VU87846 - Improper input validation
CVE-2024-2004		 CWE-20 Low
No
No
 2.4.57 SP4 27.03.2024 SB2024032713
SB2024032740
SB2024032748
and 28 more
#VU86230 - Resource exhaustion
CVE-2023-52425		 CWE-400 Medium
No
No
 2.4.62 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 120 more


Showing elements 1 - 20 out of 157