Known vulnerabilities in JBoss Core Services - page 3

Vendor: Red Hat Inc.
Software: JBoss Core Services
Software CPE: cpe:2.3:a:red_hat:jboss_core_services:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 157
Public exploits: 19
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Core Services JBoss Core Services is affected by 157 known vulnerabilities: 1 critical, 33 high, 96 medium, 27 low Critical High Medium Low

Vulnerabilities (157)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 2.4.57 SP1, 2.4.57 SP2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU76238 - Expected Behavior Violation
CVE-2023-28322		 CWE-440 Medium
No
No
 2.4.57 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 88 more
#VU76237 - Improper Certificate Validation
CVE-2023-28321		 CWE-295 Medium
No
No
 2.4.57 17.05.2023 SB2023051752
SB2023051760
SB2023051761
and 99 more
#VU76233 - Use After Free
CVE-2023-28319		 CWE-416 Low
No
No
 2.4.57 17.05.2023 SB2023051752
SB2023051761
SB2023051762
and 27 more
#VU73106 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-27522		 CWE-113 Medium
No
No
 2.4.57 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 33 more
#VU72336 - Cleartext Transmission of Sensitive Information
CVE-2023-23915		 CWE-319 Medium
No
No
 2.4.51 SP2 16.02.2023 SB2023021668
SB2023021671
SB2023021672
and 26 more
#VU72335 - Cleartext Transmission of Sensitive Information
CVE-2023-23914		 CWE-319 Medium
No
No
 2.4.51 SP2 16.02.2023 SB2023021668
SB2023021671
SB2023021672
and 29 more
#VU72086 - Memory corruption
CVE-2023-24021		 CWE-119 High
No
No
 2.4.57 09.02.2023 SB2023020947
SB2023021587
SB2023021740
and 7 more
#VU72085 - Improper input validation
CVE-2022-48279		 CWE-20 Medium
No
No
 2.4.57 09.02.2023 SB2023020946
SB2023020948
SB2023020949
and 15 more
#VU71996 - Double Free
CVE-2022-4450		 CWE-415 Medium
No
No
 2.4.51 SP2 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215		 CWE-416 Medium
No
No
 2.4.51 SP2 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 2.4.51 SP2 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286		 CWE-843 High
No
No
 2.4.51 SP2 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU71754 - Integer overflow
CVE-2022-25147		 CWE-190 High
No
No
 2.4.51 SP2 02.02.2023 SB2023020210
SB2023020212
SB2023020942
and 49 more
#VU71752 - Integer overflow
CVE-2022-24963		 CWE-190 High
No
No
 2.4.57 02.02.2023 SB2023020209
SB2023020211
SB2023022704
and 19 more
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436		 CWE-113 Medium
No
No
 2.4.57 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760		 CWE-444 Medium
No
No
 2.4.57 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71241 - Memory corruption
CVE-2006-20001		 CWE-119 Medium
No
No
 2.4.51 SP2 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 28 more
#VU70457 - Security Features
CVE-2022-43551		 CWE-254 Medium
No
No
 2.4.51 SP2 21.12.2022 SB2022122102
SB2022122620
SB2023010612
and 32 more
#VU70456 - Use After Free
CVE-2022-43552		 CWE-416 Low
No
No
 2.4.51 SP2 21.12.2022 SB2022122102
SB2022122620
SB2022122621
and 66 more


Showing elements 41 - 60 out of 157