Known vulnerabilities in JBoss Data Grid - page 4

Vendor: Red Hat Inc.
Software: JBoss Data Grid
Software CPE: cpe:2.3:a:red_hat:jboss_data_grid:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 141
Public exploits: 14
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Data Grid JBoss Data Grid is affected by 141 known vulnerabilities: 2 critical, 39 high, 75 medium, 25 low Critical High Medium Low

Vulnerabilities (141)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 8.4.7 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU84091 - Cleartext Transmission of Sensitive Information
CVE-2023-5384		 CWE-319 Low
No
No
 8.4.6 12.12.2023 SB2023121203
SB2025032016
#VU84031 - Improper Certificate Validation
CVE-2023-4586		 CWE-295 Medium
No
No
 8.4.6 08.12.2023 SB2023121105
SB2023121203
SB20231222102
and 15 more
#VU83977 - Insufficient Entropy
CVE-2023-31582		 CWE-331 Medium
No
No
 8.4.6 07.12.2023 SB2023120724
SB2023120727
SB2023120731
and 17 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 7.3.11, 8.4.5 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU81430 - Resource Management Errors
CVE-2023-5236		 CWE-399 Low
No
No
 8.4.4 03.10.2023 SB2023100337
SB2025032016
#VU81429 - Improper Access Control
CVE-2023-3629		 CWE-284 Low
No
No
 8.4.4 03.10.2023 SB2023100337
#VU81428 - Improper Access Control
CVE-2023-3628		 CWE-284 Low
No
No
 8.4.4 03.10.2023 SB2023100337
#VU81427 - UNIX Symbolic Link (Symlink) Following
CVE-2023-35887		 CWE-61 Low
No
No
 8.4.4 03.10.2023 SB2023100336
SB2023100337
SB2023100453
and 21 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 8.4.4 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 99 more
#VU72323 - Improper Certificate Validation
CVE-2021-0341		 CWE-295 Medium
No
No
 8.4.2 16.02.2023 SB2023021628
SB2023051043
SB2023051044
and 14 more
#VU72101 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-36313		 CWE-835 Medium
No
No
 8.4.1 09.02.2023 SB2023020967
SB2023020968
SB2023112078
and 2 more
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047		 CWE-502 High
Available
No
 8.4.1, 8.4.4 28.12.2022 SB2022122828
SB2022122920
SB2023011148
and 49 more
#VU70121 - Incorrect Regular Expression
CVE-2022-37603		 CWE-185 Medium
No
No
 8.4.1 12.12.2022 SB2022121221
SB2022121222
SB2023010418
and 29 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 8.4.1 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU68832 - Resource exhaustion
CVE-2022-42004		 CWE-400 Medium
No
No
 8.4.1 31.10.2022 SB2022103116
SB2022103117
SB2022111404
and 122 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 8.4.1 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823		 CWE-378 Low
No
No
 8.4.0 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 56 more
#VU61471 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0235		 CWE-200 Low
No
No
 8.4.0 20.03.2022 SB2022032001
SB2022032002
SB2022032009
and 35 more
#VU60729 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23647		 CWE-79 Low
No
No
 8.4.0 21.02.2022 SB2022022105
SB2022100650
SB2022111738
and 1 more


Showing elements 61 - 80 out of 141