Known vulnerabilities in JBoss Enterprise Application Platform - page 11

Software CPE: cpe:2.3:a:red_hat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 27
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Enterprise Application Platform JBoss Enterprise Application Platform is affected by 241 known vulnerabilities: 2 critical, 42 high, 122 medium, 75 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU36815 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-7464
CWE-611 High
No
No
- 27.07.2018 SB2017082209
#VU12209 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2018-1067
CWE-113 Low
No
No
- 26.04.2018 SB2018042609
SB2018042610
#VU12207 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-1047
CWE-22 Low
No
No
- 26.04.2018 SB2018042609
SB2018042610
#VU12127 - Deserialization of Untrusted Data
CVE-2017-5645
CWE-502 High
No
No
- 24.04.2018 SB2017040201
SB2019011707
SB2017090512
and 40 more
#VU11301 - Improper Access Control
CVE-2018-8088
CWE-284 Low
No
No
- 28.03.2018 SB2018022112
SB2018032813
SB2018032817
and 27 more
#VU37591 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2018-1048
CWE-22 Medium
No
No
- 25.01.2018 SB2018012536
SB2018031234
#VU10219 - Command injection
CVE-2017-12629
CWE-77 High
Available
No
- 24.01.2018 SB2017101213
SB2018022813
SB2017110605
and 11 more
#VU8504 - Use After Free
CVE-2017-9798
CWE-416 Low
Available
No
- 19.09.2017 SB2017092001
SB2017091801
SB2017092117
and 28 more
#VU38291 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2017-7561
CWE-444 Medium
No
No
- 13.09.2017 SB2017091336
SB2018031234
#VU38442 - Exposure of sensitive information to an unauthorized actor
CVE-2016-6311
CWE-200 Medium
No
No
- 22.08.2017 SB2017082209
#VU7548 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2017-2666
CWE-113 Medium
No
No
- 17.07.2017 SB2017071216
SB2017060813
SB2018050312
and 1 more
#VU7517 - Exposure of sensitive information to an unauthorized actor
CVE-2017-9788
CWE-200 Low
No
No
- 13.07.2017 SB2017062001
SB2017071403
SB2017071307
and 17 more
#VU7547 - Resource Management Errors
CVE-2017-2670
CWE-399 Medium
No
No
- 12.07.2017 SB2017071216
SB2017060813
SB2017060710
#VU7202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-2595
CWE-22 Low
No
No
- 26.06.2017 SB2017062606
SB2017060710
SB2017062033
#VU38883 - Deserialization of Untrusted Data
CVE-2016-3690
CWE-502 High
No
No
- 08.06.2017 SB2017060819
#VU6950 - Improper input validation
CVE-2017-5664
CWE-20 Low
No
No
- 06.06.2017 SB2017051109
SB2017060618
SB2017060619
and 23 more
#VU6611 - Improper input validation
CVE-2016-9606
CWE-20 High
No
No
- 22.05.2017 SB2017052201
SB2017060710
SB2021030547
#VU38972 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-7503
CWE-611 High
No
No
- 18.05.2017 SB2017051817
#VU408 - Exposure of sensitive information to an unauthorized actor
CVE-2016-4993
CWE-200 Low
No
No
- 12.09.2016 SB2016091302
SB2018042609
SB2018042610
#VU370 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2016-2183
CWE-327 Low
Available
No
- 08.09.2016 SB2016082601
SB2017053118
SB2017011701
and 49 more


Showing elements 201 - 220 out of 241