Known vulnerabilities in JBoss Core Services 2.4.37 SP8 - page 2

Vendor: Red Hat Inc.

Software: JBoss Core Services

Version: 2.4.37 SP8

Software CPE: cpe:2.3:a:red_hat:jboss_core_services:*:*:*:*:*:*:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 56

Public exploits: 6

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (56)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU68749 - Cleartext Transmission of Sensitive Information CVE-2022-42916	CWE-319	Medium	No	No	2.4.51 SP1	26.10.2022	SB2022102624 SB2022102662 SB2022102703 and 27 more
#VU68748 - Double Free CVE-2022-42915	CWE-415	Medium	No	No	2.4.51 SP1	26.10.2022	SB2022102624 SB2022102662 SB2022102705 and 26 more
#VU68746 - Expected Behavior Violation CVE-2022-32221	CWE-440	Medium	No	No	2.4.51 SP1	26.10.2022	SB2022102624 SB2022102643 SB2022102644 and 58 more
#VU66881 - Improper input validation CVE-2022-35252	CWE-20	Medium	No	No	2.4.51 SP1	31.08.2022	SB2022083106 SB2022090108 SB2022090217 and 55 more
#VU64685 - Improper Verification of Cryptographic Signature CVE-2022-32208	CWE-347	Medium	No	No	2.4.51 SP1	27.06.2022	SB2022062711 SB2022062724 SB2022062816 and 73 more
#VU64684 - Incorrect Default Permissions CVE-2022-32207	CWE-276	Low	No	No	2.4.51 SP1	27.06.2022	SB2022062711 SB2022062724 SB2022062816 and 35 more
#VU64682 - Resource exhaustion CVE-2022-32206	CWE-400	Medium	No	No	2.4.51 SP1	27.06.2022	SB2022062711 SB2022062724 SB2022062816 and 80 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-2068	CWE-78	Medium	No	No	2.4.51 SP1	21.06.2022	SB2022062120 SB2022062125 SB2022062236 and 135 more
#VU64089 - Improper Authentication CVE-2022-31813	CWE-287	Medium	No	No	2.4.51 SP1	08.06.2022	SB2022060817 SB2022060901 SB2022061611 and 49 more
#VU64083 - Out-of-bounds read CVE-2022-28615	CWE-125	Low	No	No	2.4.51 SP1	08.06.2022	SB2022060817 SB2022060901 SB2022061611 and 41 more
#VU64081 - Out-of-bounds read CVE-2022-28614	CWE-125	Low	No	No	2.4.51 SP1	08.06.2022	SB2022060817 SB2022060901 SB2022061611 and 36 more
#VU64080 - Out-of-bounds read CVE-2022-28330	CWE-125	Medium	No	No	2.4.51 SP1	08.06.2022	SB2022060817 SB2022060901 SB2022070730 and 11 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-26377	CWE-444	Medium	Public exploit available	No	2.4.51 SP1	08.06.2022	SB2022060817 SB2022060901 SB2022061611 and 39 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-1292	CWE-78	Medium	Public exploit available	No	2.4.51 SP1	03.05.2022	SB2022050315 SB2022050436 SB2022050503 and 141 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-22720	CWE-444	Medium	No	No	2.4.37 SP11	14.03.2022	SB2022031416 SB2022031504 SB2022031724 and 56 more
#VU61285 - Integer overflow CVE-2022-22721	CWE-190	High	No	No	2.4.51 SP1	14.03.2022	SB2022031416 SB2022031504 SB2022031724 and 39 more
#VU61284 - Out-of-bounds write CVE-2022-23943	CWE-787	High	No	No	2.4.51 SP1	14.03.2022	SB2022031416 SB2022031504 SB2022031724 and 34 more
#VU54224 - Out-of-bounds write CVE-2021-3517	CWE-787	High	No	No	2.4.37 SP11	18.06.2021	SB2020110609 SB2021061811 SB2021063005 and 42 more
#VU54223 - NULL Pointer Dereference CVE-2021-3537	CWE-476	Medium	No	No	2.4.37 SP11	18.06.2021	SB2020110609 SB2021061811 SB2021063005 and 27 more
#VU53289 - Improper input validation CVE-2021-3541	CWE-20	Medium	No	No	2.4.37 SP11	16.05.2021	SB2021051601 SB2021051602 SB2021061811 and 32 more

Showing elements 21 - 40 out of 56

Known vulnerabilities in JBoss Core Services 2.4.37 SP8 - page 2

Vulnerabilities by Severity

Vulnerabilities (56)

Please verify you're human