Known vulnerabilities in JBoss Enterprise Application Platform 7.1.0 - page 2

Version: 7.1.0
Software CPE: cpe:2.3:a:red_hat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 52
Public exploits: 14
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting JBoss Enterprise Application Platform version 7.1.0 JBoss Enterprise Application Platform 7.1.0 is affected by 52 vulnerabilities: 1 critical, 17 high, 26 medium, 8 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98024 - Improper input validation
CVE-2024-47561
CWE-20 High
No
No
7.1.8, 7.3.11 03.10.2024 SB2024100351
SB2024100504
SB2024100984
and 36 more
#VU96052 - Resource exhaustion
CVE-2024-5971
CWE-400 Medium
No
No
7.4.18 15.08.2024 SB2024081548
SB2024082312
SB2024082313
and 11 more
#VU96051 - Resource exhaustion
CVE-2024-3653
CWE-400 Medium
No
No
7.4.18 15.08.2024 SB2024081548
SB2024082312
SB2024082313
and 4 more
#VU93103 - Resource exhaustion
CVE-2023-5685
CWE-400 Medium
No
No
7.1.8, 7.3.11 24.06.2024 SB2024062414
SB2024062415
SB2024062425
and 14 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172
CWE-835 Medium
No
No
7.4.18 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89219 - Observable discrepancy
CVE-2024-30171
CWE-203 Medium
No
No
7.4.18 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU89218 - Resource exhaustion
CVE-2024-29857
CWE-400 Medium
No
No
7.4.18 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU88153 - Resource exhaustion
CVE-2024-27316
CWE-400 Medium
Public exploit available
No
7.4.18 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025
CWE-200 Medium
No
No
7.4.18 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU87567 - Server-Side Request Forgery (SSRF)
CVE-2024-28752
CWE-918 Medium
No
No
7.1.8, 7.3.11, 7.4.17 15.03.2024 SB2024031529
SB2024042254
SB2024052706
and 20 more
#VU83219 - Deserialization of Untrusted Data
CVE-2023-39410
CWE-502 Medium
No
No
7.1.8, 7.3.11, 7.4.14 16.11.2023 SB2023111614
SB2023112014
SB2023112410
and 43 more
#VU82197 - Resource exhaustion
CVE-2023-3171
CWE-400 Medium
No
No
7.4.13, 7.1.8, 7.3.11 18.10.2023 SB2023101833
SB2023101834
SB2023101835
and 4 more
#VU81948 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-4759
CWE-59 Medium
No
No
7.4.15, 8.0.1 12.10.2023 SB2023101242
SB2023101243
SB2023103012
and 21 more
#VU73244 - Resource exhaustion
CVE-2023-26464
CWE-400 Medium
No
No
7.1.8, 7.3.11, 7.4.13 10.03.2023 SB2023031040
SB2023032716
SB2023050514
and 22 more
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364
CWE-918 Medium
No
No
7.1.8, 7.3.11, 7.4.9 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU69302 - Exposed Dangerous Method or Function
CVE-2022-41853
CWE-749 High
Public exploit available
No
7.1.8, 7.3.11, 7.4.10 14.11.2022 SB2022111449
SB2022111450
SB2022111451
and 27 more
#VU65495 - Improper input validation
CVE-2022-34169
CWE-20 High
Public exploit available
No
7.1.8, 7.3.11, 7.4.19, 8.0.4 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU61938 - Deserialization of Untrusted Data
CVE-2022-23221
CWE-502 High
No
No
7.1.8, 7.3.11, 7.4.5 06.04.2022 SB2022040618
SB2022040619
SB2022042260
and 7 more
#VU49086 - Comparison using wrong factors
CVE-2020-28052
CWE-1025 High
Public exploit available
No
7.1.8, 7.3.6 18.12.2020 SB2020121801
SB2021031707
SB2021042112
and 16 more
#VU25353 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-7238
CWE-444 Medium
No
No
7.1.8, 7.2.7 14.02.2020 SB2020021409
SB2020022521
SB2020022601
and 16 more


Showing elements 21 - 40 out of 52