Known vulnerabilities in JBoss Data Grid - page 5

Vendor: Red Hat Inc.
Software: JBoss Data Grid
Software CPE: cpe:2.3:a:red_hat:jboss_data_grid:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 141
Public exploits: 14
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Data Grid JBoss Data Grid is affected by 141 known vulnerabilities: 2 critical, 39 high, 75 medium, 25 low Critical High Medium Low

Vulnerabilities (141)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73956 - Server-Side Request Forgery (SSRF)
CVE-2021-39152		 CWE-918 High
Available
No
 8.3.0 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73949 - Deserialization of Untrusted Data
CVE-2021-39146		 CWE-502 High
No
No
 8.3.0 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 11 more
#VU73948 - Deserialization of Untrusted Data
CVE-2021-39145		 CWE-502 High
No
No
 8.3.0 22.03.2023 SB2021082322
SB2023032239
SB2023050815
and 14 more
#VU68720 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-39144		 CWE-94 Critical
Available
Exploited
 7.3.10, 8.3.0 25.10.2022 SB2021082322
SB2022102568
SB2023031801
and 17 more
#VU67668 - Stack-based buffer overflow
CVE-2022-38750		 CWE-121 Medium
No
No
 8.4.0 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU67666 - Stack-based buffer overflow
CVE-2022-38749		 CWE-121 Medium
No
No
 8.4.0 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 51 more
#VU67665 - Resource exhaustion
CVE-2022-25857		 CWE-400 Medium
No
No
 8.4.0 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 83 more
#VU67664 - Stack-based buffer overflow
CVE-2022-38752		 CWE-121 Medium
No
No
 8.4.0 27.09.2022 SB2022092715
SB2022092728
SB2022100555
and 66 more
#VU67663 - Out-of-bounds write
CVE-2022-38751		 CWE-787 Medium
No
No
 8.4.0 27.09.2022 SB2022092714
SB2022092728
SB2022100555
and 50 more
#VU63159 - Allocation of Resources Without Limits or Throttling
CVE-2022-0084		 CWE-770 Low
No
No
 8.3.1 13.05.2022 SB2022051310
SB2022051311
SB2022060838
and 12 more
#VU63127 - Resource exhaustion
CVE-2021-37136		 CWE-400 Medium
No
No
 8.3.0 12.05.2022 SB2021101948
SB2022051235
SB2022060838
and 37 more
#VU62511 - Improper input validation
CVE-2021-39140		 CWE-20 Medium
No
No
 8.3.0 22.04.2022 SB2022042257
SB2023012518
SB2023032239
and 15 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 8.3.0 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 50 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 8.3.1 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU59924 - Improper input validation
CVE-2021-37137		 CWE-20 Medium
No
No
 8.3.0 23.01.2022 SB2022012310
SB2022012745
SB2022012753
and 44 more
#VU59813 - Improper input validation
CVE-2021-39139		 CWE-20 High
No
No
 8.3.0 19.01.2022 SB2022011911
SB2022011912
SB2022012325
and 21 more
#VU59701 - Improper input validation
CVE-2021-39154		 CWE-20 High
No
No
 8.3.0 18.01.2022 SB2022011835
SB2023032239
SB2023050815
and 12 more
#VU59661 - Observable discrepancy
CVE-2021-3642		 CWE-203 Low
No
No
 8.3.0 17.01.2022 SB2021080530
SB2022080830
SB2021121543
and 1 more
#VU56790 - Information Exposure Through Timing Discrepancy
CVE-2021-38153		 CWE-208 Low
No
No
 8.3.1 21.09.2021 SB2021092116
SB2022010906
SB2022012104
and 21 more
#VU54675 - Deserialization of Untrusted Data
CVE-2021-29505		 CWE-502 Medium
Available
No
 8.3.0 12.07.2021 SB2021071217
SB2021071218
SB2021071389
and 19 more


Showing elements 81 - 100 out of 141