Known vulnerabilities in JBoss Data Virtualization

Vendor: Red Hat Inc.
Software: JBoss Data Virtualization
Software CPE: cpe:2.3:a:red_hat:jboss_data_virtualization:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 19
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Data Virtualization JBoss Data Virtualization is affected by 19 known vulnerabilities: 11 high, 4 medium, 4 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493		 CWE-502 High
No
No
 6.4.8.SP1, 6.4.8 SP2 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU59692 - Deserialization of Untrusted Data
CVE-2022-23302		 CWE-502 High
No
No
 6.4.8.SP1, 6.4.8 SP2 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 60 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 6.4.8.SP1, 6.4.8 SP2 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 6.4.8.SP1, 6.4.8 SP2 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more
#VU27960 - Deserialization of Untrusted Data
CVE-2019-17571		 CWE-502 High
No
No
 6.4.8.SP1, 6.4.8 SP2 18.05.2020 SB2019122027
SB2020051806
SB2020011497
and 28 more
#VU27487 - Improper Certificate Validation
CVE-2020-9488		 CWE-295 Low
No
No
 6.4.8.SP1, 6.4.8 SP2 04.05.2020 SB2020050406
SB2020071606
SB2020071620
and 67 more
#VU21947 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-1335		 CWE-78 High
No
No
 6.4.8 20.10.2019 SB2019102004
#VU19943 - Deserialization of Untrusted Data
CVE-2018-12023		 CWE-502 Medium
No
No
 6.4.8 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 20 more
#VU19942 - Deserialization of Untrusted Data
CVE-2018-12022		 CWE-502 Medium
No
No
 6.4.8 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 18 more
#VU19938 - Deserialization of Untrusted Data
CVE-2018-11307		 CWE-502 High
No
No
 6.4.8 06.08.2019 SB2019052407
SB2019091718
SB2019092703
and 17 more
#VU18668 - Improper Access Control
CVE-2019-0201		 CWE-284 Low
No
No
 6.4.8 04.06.2019 SB2019061213
SB2019102004
SB2019112016
and 10 more
#VU17781 - Improper input validation
CVE-2018-19362		 CWE-20 High
No
No
 6.4.8 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 38 more
#VU17780 - Improper input validation
CVE-2018-19360		 CWE-20 High
No
No
 6.4.8 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 22 more
#VU17779 - Improper input validation
CVE-2018-19361		 CWE-20 High
No
No
 6.4.8 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 23 more
#VU17778 - Improper input validation
CVE-2018-14719		 CWE-20 High
No
No
 6.4.8 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 22 more
#VU17053 - Permissions, Privileges, and Access Controls
CVE-2018-14718		 CWE-264 High
No
No
 6.4.8 17.01.2019 SB2019011703
SB2019052407
SB2019091718
and 29 more
#VU16947 - Exposure of sensitive information to an unauthorized actor
CVE-2018-11798		 CWE-200 Low
No
No
 6.4.8 11.01.2019 SB2019011106
SB2019102004
SB2022041520
and 1 more
#VU11301 - Improper Access Control
CVE-2018-8088		 CWE-284 Low
No
No
 6.4.8 28.03.2018 SB2018022112
SB2018032813
SB2018032817
and 27 more
#VU11178 - Command injection
CVE-2016-5397		 CWE-77 High
No
No
 6.4.8 20.03.2018 SB201061001
SB2019102004
SB2022041520
and 1 more