Known vulnerabilities in JBoss Core Services - page 7

Vendor: Red Hat Inc.
Software: JBoss Core Services
Software CPE: cpe:2.3:a:red_hat:jboss_core_services:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 157
Public exploits: 19
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Core Services JBoss Core Services is affected by 157 known vulnerabilities: 1 critical, 33 high, 96 medium, 27 low Critical High Medium Low

Vulnerabilities (157)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53773 - NULL Pointer Dereference
CVE-2021-31618		 CWE-476 Medium
No
No
 2.4.37 SP8 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 12 more
#VU53589 - Use After Free
CVE-2021-22901		 CWE-416 High
No
No
 2.4.37 SP8 26.05.2021 SB2021052620
SB2021052711
SB2021052719
and 18 more
#VU51822 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2021-22890		 CWE-300 Medium
No
No
 2.4.37 SP8 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 15 more
#VU51821 - Exposure of sensitive information to an unauthorized actor
CVE-2021-22876		 CWE-200 Medium
No
No
 2.4.37 SP8 31.03.2021 SB2021033111
SB2021040104
SB2021040117
and 31 more
#VU51733 - NULL Pointer Dereference
CVE-2021-3449		 CWE-476 Medium
Available
No
 - 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 56 more
#VU51732 - Security Features
CVE-2021-3450		 CWE-254 Medium
No
No
 - 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU48895 - Improper Check for Certificate Revocation
CVE-2020-8286		 CWE-299 Medium
No
No
 2.4.37 SP8 09.12.2020 SB2020120902
SB2020120915
SB2020120929
and 30 more
#VU48894 - Uncontrolled Recursion
CVE-2020-8285		 CWE-674 Low
No
No
 2.4.37 SP8 09.12.2020 SB2020120902
SB2020120915
SB2020120928
and 37 more
#VU48893 - Exposure of sensitive information to an unauthorized actor
CVE-2020-8284		 CWE-200 Medium
No
No
 2.4.37 SP8 09.12.2020 SB2020120902
SB2020120915
SB2020120927
and 31 more
#VU21045 - Cryptographic Issues
CVE-2019-1563		 CWE-310 Low
No
No
 - 11.09.2019 SB2019091112
SB2019091202
SB2019092407
and 27 more
#VU21044 - Protection Mechanism Failure
CVE-2019-1549		 CWE-693 Low
No
No
 - 11.09.2019 SB2019091112
SB2019100304
SB2020040729
and 9 more
#VU21043 - Cryptographic Issues
CVE-2019-1547		 CWE-310 Low
No
No
 - 11.09.2019 SB2019091112
SB2019091202
SB2019092407
and 39 more
#VU20386 - Use After Free
CVE-2019-10082		 CWE-416 Medium
No
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 17 more
#VU20385 - NULL Pointer Dereference
CVE-2019-10097		 CWE-476 Low
No
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 14 more
#VU20384 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10092		 CWE-79 Low
No
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 17 more
#VU20374 - Improper input validation
CVE-2019-10098		 CWE-20 Medium
Available
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 19 more
#VU20373 - Out-of-bounds write
CVE-2019-10081		 CWE-787 Medium
No
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 11 more
#VU20197 - Resource exhaustion
CVE-2019-9513		 CWE-400 Medium
No
No
 - 13.08.2019 SB2019081323
SB2019081326
SB2019081602
and 51 more
#VU20196 - Resource exhaustion
CVE-2019-9511		 CWE-400 Medium
No
No
 - 13.08.2019 SB2019081323
SB2019081326
SB2019081602
and 55 more
#VU18113 - Improper input validation
CVE-2019-0220		 CWE-20 Low
No
No
 - 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 17 more


Showing elements 121 - 140 out of 157