Known vulnerabilities in JBoss Core Services 2.4.51 SP2

Vendor: Red Hat Inc.

Software: JBoss Core Services

Version: 2.4.51 SP2

Software CPE: cpe:2.3:a:red_hat:jboss_core_services:*:*:*:*:*:*:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 7

Public exploits: 2

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU104099 - Use After Free CVE-2024-56171	CWE-416	High	No	No	2.4.62	20.02.2025	SB2025022003 SB2025022010 SB2025022023 and 111 more
#VU104098 - Stack-based buffer overflow CVE-2025-24928	CWE-121	High	No	No	2.4.62	20.02.2025	SB2025022003 SB2025022010 SB2025022023 and 111 more
#VU96897 - Buffer Underwrite ('Buffer Underflow') CVE-2024-45490	CWE-124	High	No	No	2.4.62	05.09.2024	SB20240905100 SB20240905101 SB20240905102 and 113 more
#VU93538 - NULL Pointer Dereference CVE-2024-36387	CWE-476	Medium	No	No	2.4.62	01.07.2024	SB2024070155 SB20240702144 SB2024070890 and 18 more
#VU93424 - Out-of-bounds read CVE-2024-5535	CWE-125	Low	Public exploit available	No	2.4.62	27.06.2024	SB2024062720 SB20240717135 SB2024072154 and 157 more
#VU86230 - Resource exhaustion CVE-2023-52425	CWE-400	Medium	No	No	2.4.62	07.02.2024	SB2024020750 SB2024020754 SB2024020765 and 120 more
#VU81728 - Resource exhaustion CVE-2023-44487	CWE-400	High	Public exploit available	Exploited	2.4.57 SP1, 2.4.57 SP2	10.10.2023	SB2023101023 SB2023101024 SB2023101037 and 651 more