Known vulnerabilities in JBoss Data Grid - page 2

Vendor: Red Hat Inc.
Software: JBoss Data Grid
Software CPE: cpe:2.3:a:red_hat:jboss_data_grid:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 103
Public exploits: 12
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Data Grid JBoss Data Grid is affected by 103 known vulnerabilities: 2 critical, 30 high, 48 medium, 23 low Critical High Medium Low

Vulnerabilities (103)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 8.5.0 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 8.4.7 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 137 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 8.4.7 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 101 more
#VU84091 - Cleartext Transmission of Sensitive Information
CVE-2023-5384		 CWE-319 Low
No
No
 8.4.6 12.12.2023 SB2023121203
SB2025032016
#VU84031 - Improper Certificate Validation
CVE-2023-4586		 CWE-295 Medium
No
No
 8.4.6 08.12.2023 SB2023121105
SB2023121203
SB20231222102
and 15 more
#VU83977 - Insufficient Entropy
CVE-2023-31582		 CWE-331 Medium
No
No
 8.4.6 07.12.2023 SB2023120724
SB2023120727
SB2023120731
and 17 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 7.3.11, 8.4.5 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU81430 - Resource Management Errors
CVE-2023-5236		 CWE-399 Low
No
No
 8.4.4 03.10.2023 SB2023100337
SB2025032016
#VU81429 - Improper Access Control
CVE-2023-3629		 CWE-284 Low
No
No
 8.4.4 03.10.2023 SB2023100337
#VU81428 - Improper Access Control
CVE-2023-3628		 CWE-284 Low
No
No
 8.4.4 03.10.2023 SB2023100337
#VU81427 - UNIX Symbolic Link (Symlink) Following
CVE-2023-35887		 CWE-61 Low
No
No
 8.4.4 03.10.2023 SB2023100336
SB2023100337
SB2023100453
and 21 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 8.4.4 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU72323 - Improper Certificate Validation
CVE-2021-0341		 CWE-295 Medium
No
No
 8.4.2 16.02.2023 SB2023021628
SB2023051043
SB2023051044
and 14 more
#VU72101 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-36313		 CWE-835 Medium
No
No
 8.4.1 09.02.2023 SB2023020967
SB2023020968
SB2023112078
and 2 more
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047		 CWE-502 High
Available
No
 8.4.1, 8.4.4 28.12.2022 SB2022122828
SB2022122920
SB2023011148
and 49 more
#VU70121 - Incorrect Regular Expression
CVE-2022-37603		 CWE-185 Medium
No
No
 8.4.1 12.12.2022 SB2022121221
SB2022121222
SB2023010418
and 29 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 8.4.1 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 8.4.1 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68720 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-39144		 CWE-94 Critical
Available
Exploited
 7.3.10, 8.3.0 25.10.2022 SB2021082322
SB2022102568
SB2023031801
and 17 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 8.4.1 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more


Showing elements 21 - 40 out of 103