Known vulnerabilities in JBoss Core Services 2.4.37 SP10 - page 2

Vendor: Red Hat Inc.

Software: JBoss Core Services

Version: 2.4.37 SP10

Software CPE: cpe:2.3:a:red_hat:jboss_core_services:*:*:*:*:*:*:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 44

Public exploits: 5

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (44)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU68749 - Cleartext Transmission of Sensitive Information CVE-2022-42916	CWE-319	Medium	No	No	2.4.51 SP1	26.10.2022	SB2022102624 SB2022102662 SB2022102703 and 27 more
#VU68748 - Double Free CVE-2022-42915	CWE-415	Medium	No	No	2.4.51 SP1	26.10.2022	SB2022102624 SB2022102662 SB2022102705 and 26 more
#VU68746 - Expected Behavior Violation CVE-2022-32221	CWE-440	Medium	No	No	2.4.51 SP1	26.10.2022	SB2022102624 SB2022102643 SB2022102644 and 58 more
#VU66881 - Improper input validation CVE-2022-35252	CWE-20	Medium	No	No	2.4.51 SP1	31.08.2022	SB2022083106 SB2022090108 SB2022090217 and 55 more
#VU64685 - Improper Verification of Cryptographic Signature CVE-2022-32208	CWE-347	Medium	No	No	2.4.51 SP1	27.06.2022	SB2022062711 SB2022062724 SB2022062816 and 73 more
#VU64684 - Incorrect Default Permissions CVE-2022-32207	CWE-276	Low	No	No	2.4.51 SP1	27.06.2022	SB2022062711 SB2022062724 SB2022062816 and 35 more
#VU64682 - Resource exhaustion CVE-2022-32206	CWE-400	Medium	No	No	2.4.51 SP1	27.06.2022	SB2022062711 SB2022062724 SB2022062816 and 80 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-2068	CWE-78	Medium	No	No	2.4.51 SP1	21.06.2022	SB2022062120 SB2022062125 SB2022062236 and 135 more
#VU64089 - Improper Authentication CVE-2022-31813	CWE-287	Medium	No	No	2.4.51 SP1	08.06.2022	SB2022060817 SB2022060901 SB2022061611 and 49 more
#VU64086 - Resource exhaustion CVE-2022-30522	CWE-400	Medium	No	No	2.4.51 SP1	08.06.2022	SB2022060817 SB2022060901 SB2022061723 and 31 more
#VU64083 - Out-of-bounds read CVE-2022-28615	CWE-125	Low	No	No	2.4.51 SP1	08.06.2022	SB2022060817 SB2022060901 SB2022061611 and 41 more
#VU64081 - Out-of-bounds read CVE-2022-28614	CWE-125	Low	No	No	2.4.51 SP1	08.06.2022	SB2022060817 SB2022060901 SB2022061611 and 36 more
#VU64080 - Out-of-bounds read CVE-2022-28330	CWE-125	Medium	No	No	2.4.51 SP1	08.06.2022	SB2022060817 SB2022060901 SB2022070730 and 11 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-26377	CWE-444	Medium	Public exploit available	No	2.4.51 SP1	08.06.2022	SB2022060817 SB2022060901 SB2022061611 and 39 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-1292	CWE-78	Medium	Public exploit available	No	2.4.51 SP1	03.05.2022	SB2022050315 SB2022050436 SB2022050503 and 141 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-0778	CWE-835	Medium	Public exploit available	No	2.4.37 SP11	15.03.2022	SB2022031520 SB2022031522 SB2022031611 and 238 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-22720	CWE-444	Medium	No	No	2.4.37 SP11	14.03.2022	SB2022031416 SB2022031504 SB2022031724 and 56 more
#VU61285 - Integer overflow CVE-2022-22721	CWE-190	High	No	No	2.4.51 SP1	14.03.2022	SB2022031416 SB2022031504 SB2022031724 and 39 more
#VU60922 - Use After Free CVE-2022-23308	CWE-416	High	No	No	2.4.37 SP11	01.03.2022	SB2022030109 SB2022030110 SB2022031503 and 59 more
#VU54222 - Use After Free CVE-2021-3516	CWE-416	High	No	No	2.4.37 SP11	18.06.2021	SB2020110609 SB2021061811 SB2021063005 and 28 more

Showing elements 21 - 40 out of 44

Known vulnerabilities in JBoss Core Services 2.4.37 SP10 - page 2

Vulnerabilities by Severity

Vulnerabilities (44)

Please verify you're human