Known vulnerabilities in JBoss Enterprise Application Platform - page 11

Software CPE: cpe:2.3:a:red_hat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
Total vulnerabilities: 241
Public exploits: 27
Known exploited (KEV): 6

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JBoss Enterprise Application Platform JBoss Enterprise Application Platform is affected by 241 known vulnerabilities: 2 critical, 42 high, 122 medium, 75 low Critical High Medium Low

Vulnerabilities (241)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU19933 - Permissions, Privileges, and Access Controls
CVE-2019-14379
CWE-264 High
No
No
7.2.4 05.08.2019 SB2019091307
SB2019092703
SB2019100116
and 33 more
#VU18961 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12814
CWE-200 Medium
No
No
7.2.4 02.07.2019 SB2019062606
SB2019092703
SB2019100116
and 25 more
#VU16173 - Exposure of sensitive information to an unauthorized actor
CVE-2018-13366
CWE-200 Low
No
No
- 29.11.2018 SB2018112907
SB2018091704
SB2018092411
and 2 more
#VU14267 - Exposure of sensitive information to an unauthorized actor
CVE-2017-2582
CWE-200 Low
No
No
- 04.08.2018 SB2017031002
SB2018092411
SB2018092412
and 6 more
#VU12127 - Deserialization of Untrusted Data
CVE-2017-5645
CWE-502 High
No
No
- 24.04.2018 SB2017040201
SB2019011707
SB2017090512
and 40 more
#VU10219 - Command injection
CVE-2017-12629
CWE-77 High
Available
No
- 24.01.2018 SB2017101213
SB2018022813
SB2017110605
and 11 more
#VU9130 - Permissions, Privileges, and Access Controls
CVE-2017-7536
CWE-264 Low
No
No
- 08.11.2017 SB2017110807
SB2018092411
SB2018092412
and 2 more
#VU9128 - Deserialization of Untrusted Data
CVE-2017-7525
CWE-502 High
Available
No
- 08.11.2017 SB2017110807
SB2017102005
SB2017120205
and 41 more
#VU8504 - Use After Free
CVE-2017-9798
CWE-416 Low
Available
No
- 19.09.2017 SB2017092001
SB2017091801
SB2017092117
and 28 more
#VU7548 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2017-2666
CWE-113 Medium
No
No
- 17.07.2017 SB2017071216
SB2017060813
SB2018050312
and 1 more
#VU7517 - Exposure of sensitive information to an unauthorized actor
CVE-2017-9788
CWE-200 Low
No
No
- 13.07.2017 SB2017062001
SB2017071403
SB2017071307
and 17 more
#VU7547 - Resource Management Errors
CVE-2017-2670
CWE-399 Medium
No
No
- 12.07.2017 SB2017071216
SB2017060813
SB2017060710
#VU7202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-2595
CWE-22 Low
No
No
- 26.06.2017 SB2017062606
SB2017060710
SB2017062033
#VU6950 - Improper input validation
CVE-2017-5664
CWE-20 Low
No
No
- 06.06.2017 SB2017051109
SB2017060618
SB2017060619
and 23 more
#VU6611 - Improper input validation
CVE-2016-9606
CWE-20 High
No
No
- 22.05.2017 SB2017052201
SB2017060710
SB2021030547
#VU5233 - Resource exhaustion
CVE-2014-0050
CWE-400 Medium
Available
No
- 23.01.2017 SB2014020601
SB2015092620
SB2014041701
and 12 more
#VU370 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2016-2183
CWE-327 Low
Available
No
- 08.09.2016 SB2016082601
SB2017053118
SB2017011701
and 49 more
#VU261 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-5174
CWE-22 Low
No
No
- 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU197 - Resource exhaustion
CVE-2016-3092
CWE-400 Medium
No
No
- 22.07.2016 SB2016070602
SB2016070203
SB2016063002
and 20 more
#VU29 - Authentication Bypass Issues
CVE-2016-2141
CWE-592 High
No
No
- 27.06.2016 SB2016071807
SB2016062301
SB2016062302


Showing elements 201 - 220 out of 241