Known vulnerabilities in JBoss Core Services - page 8

Vendor: Red Hat Inc.
Software: JBoss Core Services
Software CPE: cpe:2.3:a:red_hat:jboss_core_services:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 157
Public exploits: 19
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Core Services JBoss Core Services is affected by 157 known vulnerabilities: 1 critical, 33 high, 96 medium, 27 low Critical High Medium Low

Vulnerabilities (157)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU20340 - Resource Management Errors
CVE-2019-9517		 CWE-399 Medium
No
No
 - 20.08.2019 SB2019082303
SB2019082610
SB2019090202
and 37 more
#VU20198 - Resource exhaustion
CVE-2019-9516		 CWE-400 Medium
No
No
 - 13.08.2019 SB2019081323
SB2019081602
SB2019081606
and 41 more
#VU18111 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2019-0217		 CWE-362 Low
No
No
 - 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 17 more
#VU18109 - Use After Free
CVE-2019-0196		 CWE-416 Medium
No
No
 - 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 17 more
#VU18108 - Resource Management Errors
CVE-2019-0197		 CWE-399 Medium
No
No
 - 02.04.2019 SB2019040201
SB2019041607
SB2019041106
and 13 more
#VU17178 - Improper Access Control
CVE-2018-17199		 CWE-284 Low
No
No
 - 23.01.2019 SB2019012307
SB2019012308
SB2019012508
and 18 more
#VU17177 - Improper input validation
CVE-2018-17189		 CWE-20 Medium
No
No
 - 23.01.2019 SB2019012307
SB2019012308
SB2019012508
and 18 more
#VU15723 - Information Exposure Through Timing Discrepancy
CVE-2018-5407		 CWE-208 Low
Available
No
 - 06.11.2018 SB2018110602
SB2018111301
SB2018112201
and 30 more
#VU15668 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0734		 CWE-200 Low
No
No
 - 01.11.2018 SB2018110102
SB2018112201
SB2018112602
and 39 more
#VU36776 - Improper input validation
CVE-2016-9596		 CWE-20 Medium
No
No
 - 16.08.2018 SB2018081629
#VU36777 - Improper input validation
CVE-2016-9598		 CWE-20 Medium
No
No
 - 16.08.2018 SB2018081629
#VU11854 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0737		 CWE-200 Low
No
No
 - 17.04.2018 SB2018041705
SB2018042001
SB2018070301
and 26 more
#VU9477 - Exposure of sensitive information to an unauthorized actor
CVE-2017-12613		 CWE-200 Medium
No
No
 - 30.11.2017 SB2017113015
SB2017102712
SB2017120608
and 16 more
#VU8504 - Use After Free
CVE-2017-9798		 CWE-416 Low
Available
No
 - 19.09.2017 SB2017092001
SB2017091801
SB2017092117
and 28 more
#VU7119 - Out-of-bounds read
CVE-2017-7679		 CWE-125 Medium
Available
No
 - 20.06.2017 SB2017062001
SB2017062807
SB2017063012
and 26 more
#VU7116 - Authentication Bypass Issues
CVE-2017-3169		 CWE-592 Medium
Available
No
 - 20.06.2017 SB2017062001
SB2017062807
SB2017063012
and 26 more
#VU7115 - Authentication Bypass Issues
CVE-2017-3167		 CWE-592 Medium
No
No
 - 20.06.2017 SB2017062001
SB2017062807
SB2017063012
and 25 more


Showing elements 141 - 160 out of 157